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Dear  CAIS  Reviewer: 

The  Common  APSE  Interface  Set  CCAIS)  has  been  developed  to 
facilitate  interoperability  and  transportability  between  APSEs. 
Its  development  was  directed  by  a  January  3,  1982  Memorandum  of 
Agreement  between  the  three  Services  and  the  Deputy  Under 
Secretary  of  Defense  for  Research  and  Engineering  (Acquisition 
Management).  In  that  memorandum,  the  Services  agreed  to 
establish  a  set  of  interfaces  upon  which  formal  coordination  as  a 
military  standard  could  begin.  However,  the  CAIS  is  new  and 
there  is  very  little  experience  with  it  as  yet.  Therefore,  its 
establishment  as  a  military  standard  must  be  accompanied  by  a 
clear  statement  of  the  policy  regarding  its  application  to 
projects  and  contracts. 

The  attached  is  a  proposed  policy  statement  regarding 
appropriate  application  of  CAIS  Version  1  once  it  is  approved  as 
a  military  standard.  The  community  at  large  has  expressed  a 
great  deal  of  concern  over  the  potential  for  misapplication  of 
this  interface  set  when  it  becomes  a  military  standard. 

Therefore,  we  are  submitting  this  draft  policy  statement  for  your 
review  in  addition  to  the  MIL-STD-CAIS  document  itself.  It  is 
requested  that  you  use  the  same  comment  procedures  for  returning 
feedback  on  this  draft  policy  statement  as  for  the  CAIS  document 
itself. 


Robert  F.  Mathis 
Director 

STARS  Joint  Program  Office 
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PROPOSED  CAIS  POLICIES 


1.  Objective:  The  objective  behind  the  creation  of  the  Common 
APSE  Interface  Set  (CAIS)  is  to  promote  the  portability  of 
tools  and  data  between  APSEs.  The  CAIS  has  been  formulated 
to  provide  those  interfaces  most  commonly  required  by  tools 
in  the  course  of  their  normal  operations.  When  the  CAIS  has 
matured  to  the  point  of  wide  acceptance  by  industry,  the  DoD 
will  move  to  apply  this  standard  to  the  DoD-funded 
environments . 

2.  Purpose:  This  set  of  interfaces  is  being  issued  as  a 
military  standard  in  order  to  allow  its  application  to 
government  contracts.  The  principal  purpose  of  such 
application  is  to  allow  contracts  to  specify  the  use  of  the 
CAIS  in  experimental  implementations  whose  objective  is  to 
learn  about  the  viability,  feasibility,  implementability  and 
usability  of  the  interface  set  as  a  component  of  a 
programming  support  environment.  Implementations  of  this 
proposed  interface  set  should  provide  knowledge  about 
implementation  of  its  features  and  feedback  to  the  CAIS 
designers  relevant  to  the  development  of  Version  2  of  the 
CAIS. 

3.  Proper  Uses:  Proper  applications  of  this  standard  to 
contracts  include:  (Ij  prototype  implementations  of  the 
interface  set,  either  wholly  or  in  part;  (2)  prototype 
implementations  of  tools  written  to  run  on  top  of  a  CAIS 
implementation;  (3)  implementation/comparison  studies 
designed  for  such  purposes  as  determining  the  probable  ease 
of  implementing  the  CAIS  on  a  new  operating  system  or  bare 
machine  or  comparing  the  features  available  in  the  CAIS  with 
those  considered  essential  in  another  operating  system;  and 
(4)  experimental  studies  designed  to  utilize  a  prototype 
CAIS  and/or  tool  implementation  in  order  to  gather 
information  regarding  performance,  usability,  viability, 
etc. 

4.  Improper  Uses:  It  is  not  intended  that  the  CAIS  Version  1 
military  standard  be  imposed  on  any  development  or 
maintenance  project  whose  primary  purpose  is  not  explicitly 
to  experiment  with  its  implementation  or  that  would  be 
unnecessarily  risking  total  project  success  on  the 
(unproven)  viability  of  the  current  CAIS.  The  CAIS  should 
not  be  imposed  nonchalantly  or  arbitrarily  or  without  a 
clear  understanding  of  the  potential  costs  and  risks 
involved. 

5.  Feedback:  All  uses  made  of  the  CAIS  should  require  at  least 
one  report  intended  to  provide  feedback  to  the  CAIS 
designers  regarding  the  pros  and  cons  of  its  implementation 
and  use,  ease  or  difficulty  encountered  with  particular 
features,  and  suggestions  for  improvements  to  either  the 
form  or  technical  content  of  the  military  standard  document. 
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San  Diego.  CA,  B2152-5000  by  using  the  self  addressed  Standardization  Document 
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FOREWORD 


This  document  has  been  prepared  in  response  to  the  Memorandum  of  Agreement  signed  by  the 
Undersecretary  of  Defense  and  the  Assistant  Secretaries  of  the  Air  Force,  Army,  and  Navy.  The 
memorandum  established  agreement  for  defining  a  set  of  common  Interfaces  for  the  Department  of 
Defense  (DoD)  Ada  Programming  Support  Environment  (APSEs)  to  promote  Ada  tool  transportability 
and  interoperability.  The  Initial  interfaces  for  the  CAJS  were  derived  from  the  Ada  Integrated 
Environment  (AJE)  and  the  Ada  Language  System  (ALS).  Since  then  the  CAJS  has  been  expanded  to 
be  Implementable  as  part  of  a  wide  variety  of  APSEs.  It  is  anticipated  that  the  CAJS  will  evolve  to 
meet  new  needs.  Through  the  acceptance  of  this  standard.  It  is  anticipated  that  the  source  level 
portability  or  Ada  software  tools  will  be  enhanced  for  both  DoD  and  non-DoD  users. 

The  authors  of  this  document  include  technical  representatives  from  the  two  DoD  APSE  contractors, 
representatives  from  the  DoD's  Kernel  Ada  Programming  Support  Environment  (KAPSE)  Interface 
Team  (KIT),  and  volunteer  representatives  from  the  KAPSE  Interface  Team  from  Industry  and 
Academia  (KIT1A). 

The  initial  efTort  for  definition  of  the  CAJS  was  begun  in  September  1982  by  the  following  members  of 
the  KAPSE  Interface  Team  (KIT):  J.  Foidl  (TRW'),  J.  Kramer  (Institute  for  Defense  Analyses). 
P.  Oberndorf  (Naval  Ocean  Systems  Center).  T.  Taft  (Intermetrics),  R.  Thall  (SofTech)  and 
W.  Wilder  (NAVSEA  PMS-408).  In  February  1983  the  design  team  was  expanded  to  include  LCDR 
B.  Schaar  (Ada  Joint  Program  Office),  T. Harrison  (Texas  Instruments)  and  KAPSE  Interface  Team 
from  Industry  and  Academia  (KIT1A)  members:  H.  Fischer  (Litton  Data  Systems).  E.  Lamb  (Boll 
Labs).  T.  Lyons  (Software  Sciences  Ltd..  U.K.).  D.  McGonagle  (General  Electric),  H.  Morse  (Frey 
Federal  Systems).  E.  Ploedereder  (Tartan  Laboratories).  H.  Willman  (Raytheon),  and  L.  Yelowitz 
(Ford  Aerospace).  During  1984.  the  following  people  assisted  in  preparation  of  this  document:  F.  Belz 
(TRW)  and  the  TRW  prototype  team.  K.  Connolly  (TRW),  S.  Ferdman  (Data  General).  G.  Filch 
(Intermetrics).  R.  Gouw  (TRW),  B.  Grant  (Intermetrics),  N.  I^ee  (Institute  for  Defense  Analyses), 
J.  Long  (TRW),  and  R.  Robinson  (Institute  for  Defense  Analyses).  Additional  constructive  criticism 
and  direction  was  provided  by  G.  Myers  (Naval  Ocean  Systems  Center),  O.  Roubine  (InTormatique 
Internationale),  and  the  general  memberships  of  the  KIT  and  KITIA,  as  well  as  many  Independent 
reviewers.  The  Ada  Joint  Program  Orrice  is  particularly  grateful  to  these  KITIA  members  and  their 
companies  for  providing  the  time  and  resources  that  significantly  contributed  to  this  document. 

This  document  was  prepared  with  the  Unilogic  Ltd.  SCRIBE  typeset  tool  on  the  TRW'  Software 
Productivity  Project  development  environment. 
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FOREWORD 

This  document  has  been  prepared  In  response  to  the  Memorandum  of  Agreement  signed  by  the 
Undersecretary  of  Defense  and  the  Assistant  Secretaries  of  the  AJr  Force,  Army,  and  Navy.  The 
memorandum  established  agreement  for  defining  a  set  of  common  Interfaces  for  the  Department  of 
Defense  (DoD)  Ada  Programming  Support  Environment  (APSEs)  to  promote  Ada  tool  transportability 
and  Interoperability.  The  Initial  Interfaces  for  the  CAJS  were  derived  from  the  Ada  Integrated 
Environment  (A1E)  and  the  Ada  Language  System  (ALS).  Since  then  the  CAJS  has  been  expanded  to 
be  Impiementable  as  part  of  a  wide  variety  of  APSEs.  It  is  anticipated  that  the  CAJS  will  evolve  to 
meet  new  needs.  Through  the  acceptance  of  this  standard,  It  Is  anticipated  that  the  source  level 
portability  of  Ada  software  tools  will  be  enhanced  for  both  DoD  and  non-DoD  users. 

The  authors  of  this  document  include  technical  representatives  from  the  two  DoD  APSE  contractors, 
representatives  from  the  DoD's  Kernel  Ada  Programming  Support  Environment  (KAPSE)  Interface 
Team  (KIT),  and  volunteer  representatives  from  the  KAPSE  Interface  Team  from  Industry  and 
Academia  (KITIA). 

The  initial  effort  for  definition  of  the  CAJS  was  begun  in  September  1982  by  the  following  members  of 
the  KAPSE  Interface  Team  (KIT):  J.  Foidl  (TRW’),  J.  Kramer  (Institute  for  Defense  Analyses), 
P.  Oberndorf  (Naval  Ocean  Systems  Center).  T.  Taft  (Intermetrics),  R.  Thall  (SofTech)  and 
W.  Wilder  (NAVSEA  PMS-408).  In  February  1983  the  design  team  was  expanded  to  Include  LCDR 
B.  Schaar  (Ada  Joint  Program  Office),  T. Harrison  (Texas  Instruments)  and  KAPSE  Interface  Team 
from  Industry  and  Academia  (KITIA)  members:  H.  Fischer  (Litton  Data  Systems),  E.  Lamb  (Bell 
Labs),  T.  Lyons  (Software  Sciences  Ltd.,  U.K.),  D.  McGonagle  (General  Electric),  H.  Morse  (Frey 
Federal  Systems),  E.  Ploedereder  (Tartan  Laboratories),  H.  Wlllman  (Raytheon),  and  L.  Yelowitz 
(Ford  Aerospace).  During  1984.  the  following  people  assisted  in  preparation  of  this  document:  F.  Belz 
(TRW)  and  the  TRW  prototype  team.  K.  Connolly  (TRW’).  S.  Ferdman  (Data  General),  G.  Fitch 
(Intermetrics),  R.  Gouw  (TRW),  B.  Grant  (Intermetrics),  N.  Lee  (Institute  for  Defense  Analyses), 
J.  Long  (TRW’),  and  R.  Robinson  (Institute  for  Defense  Analyses).  Additional  constructive  criticism 
and  direction  was  provided  by  G.  Myers  (Naval  Ocean  Systems  Center),  O.  Roublne  (Informatique 
Internationale),  and  the  general  memberships  of  the  KIT  and  KITIA,  as  well  as  many  Independent 
reviewers.  The  Ada  Joint  Program  Office  Is  particularly  grateful  to  these  KITIA  members  and  their 
companies  for  providing  the  time  and  resources  that  significantly  contributed  to  this  document. 

This  document  was  prepared  with  the  Unllogic  Ltd.  SCRIBE  typeset  tool  on  the  TRW  Software 
Productivity  Project  development  environment. 
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descendant  (of  a  node)  -  Any  node  -“hlch  is  reachable  from  other  nodes  via  primary  relationships 

pragmatics  -  Constraints  Imposed  by  an  Implementation  that  are  not  defined  by  the  syntax  or 
semantics  of  the  CAIS. 

primary  relationship  -  The  initial  relationship  established  from  an  existing  node  to  a  newly  created 
node  during  its  creation.  The  existence  of  a  node  is  determined  by  the  existence  of  the  primary 
relationship  of  which  it  is  the  target. 

process  -  The  execution  of  an  Ada  program,  including  all  Its  tasks, 
process  node  -  A  node  whose  contents  represent  a  CAIS  process. 

program  -  [LRM]  A  program  Is  composed  of  a  number  of  compilation  units,  one  of  which  is  a 
subprogram  called  the  main  program. 

qualified  area  -  A  contiguous  group  of  positions  In  a  form  that  share  a  common  set  of 
characteristics. 

queue  -  [IEEE]  A  list  that  Is  accessed  In  a  flrst-ln.  flrst-out  manner, 
relation  -  In  the  node  model,  a  class  of  relationships  sharing  the  same  nc  ne. 
relation  name  -  The  string  that  Identifies  a  relation. 

relationship  -  In  the  node  model,  an  edge  of  the  directed  graph  which  emanates  from  ;i  sourer  node 
and  terminates  at  a  target  node.  A  relationship  is  an  instance  of  a  relation. 

relationship  key  -  The  string  that  distinguishes  a  relationship  from  other  relationships  having  the 
same  relation  name  and  emanating  from  the  same  node. 

relevant  grant  items  -  The  Items  in  values  of  GRANT  attributes  of  relationships  of  the  relation 
ACCESS  emanating  from  the  object  and  pointing  at  any  node  representing  a  role  which  is  an  adopted 
role  of  the  subject  or  representing  a  group,  one  of  whose  permanent  members  Is  an  adopted  role  of  the 
subject. 

role  -  A  set  of  access  rights  that  a  subject  can  acquire. 

root  process  node  -  The  Initial  process  node  created  when  a  user  logs  on  to  an  APSE  or  when  a  new 
Job  Is  created  via  the  CREATE_JOB  Interface. 

secondary  relationship  -  An  arbitrary  connection  which  Is  established  between  two  existing  nodes. 

security  level  -  (TCSEC]  The  combination  of  a  hierarchical  classification  and  a  set  of  non- 
hierarchteal  categories  that  represents  the  sensitivity  of  Information 

source  node  -  The  node  from  which  a  relationship  emanates. 

start  position  (of  a  form  terminal)  -  The  position  of  a  form  Identified  by  row  one,  column  one. 
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latest  key  -  The  final  part  of  a  key  that  Is  automatically  assigned  lexicographically  following  all 
previous  keys  for  the  same  relation  names  and  Initial  relationship  key  character  sequence  for  a  given 
node. 

liat-  [IEEE!  An  ordered  set  of  Items  of  data;  In  the  CAJS,  an  entity  of  type  LIST_TYPE  whose  value 
Is  a  linearly  ordered  set  of  data  elements. 

Hat  item  -  A  data  element  In  a  list. 

mandatory  access  control  -  See  access  control. 

named  item  -  a  list  Item  which  has  name  associated  with  It. 

named  list  -  a  list  whose  Items  are  all  named. 

node  -  A  representation  within  the  C'AJS  of  an  c-itlty  relevant  to  the  APSE. 

node  handle  -  An  Ada  object  of  type  NODE_TYPE  which  is  used  to  identify  a  CA1S  node;  it  is 
Internal  to  a  process. 

non-existing  node  -  A  node  which  has  never  been  created. 

object  -  (TCSECj  A  passive  entity  that  contains  or  receives  Information.  In  the  CAIS.  any  node  may 
be  an  object. 

obtainable  -  A  node  Is  obtainable  If  It  Is  created  and  not  deleted. 

open  node  handle  -  A  node  handle  that  has  been  assigned  to  a  particular  node. 

parent  -  The  source  node  of  a  primary  relationship;  also  the  target  of  a  relationship  of  the  predefined 
relation  PARENT. 

path  -  A  sequence  of  relationships  connecting  one  node  to  another.  Starting  from  a  given  node,  a 
path  Is  followed  by  traversing  a  sequence  of  relationships  until  the  desired  node  Is  reached. 

path  element  -  A  portion  or  a  pathname  representing  the  traversal  of  a  single  relationship:  a  single 
relation  name  and  relationship  key  pair. 

pathname  -  A  name  for  a  path  consisting  of  the  concatenation  of  the  names  of  the  traversed 
relationships  In  the  path  In  the  same  order  In  which  they  are  traversed. 

permanent  member  -  A  group  member  which  Is  Intrinsically  related  to  the  group  via  primary 
relationships  of  the  predefined  relation  PERMANENT_ MEMBER, 

position  (or  a  terminal)  •  A  place  In  an  output  device  In  which  a  single,  printable  ASCII  character 
may  be  graphically  displayed. 

potential  member  -  A  group  member  that  may  dynamically  acquire  membership  In  the  group; 
represented  by  a  node  that  Is  the  target  of  a  secondary  relationship  of  the  predefined  relation 
POTENT!AL_ MEMBER  emanating  from  that  group  node  or  from  any  of  that  group  nodes' 
descendants 
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element  (of  a  flic)  -  A  value  of  the  generic  data  type  with  which  the  input  and  output  package  m- 
Instantiated :  9ee  jURM]  for  additional  information. 

end  position  -  The  position  of  a  form  Identified  by  the  highest  row  and  column  Indices  of  the  form 

external  file  -  (LRM  14.1.1  -  Ada  external  file)  Values  Input  from  the  external  environment  of  the 
program,  or  output  to  the  environment,  are  considered  to  occupy  external  flies.  An  external  file  can 
be  anything  external  to  the  program  that  can  produce  a  value  to  be  read  or  receive  a  value  to  be 
written. 

file  -  See  external  file. 

file  handle  -  An  object  of  type  FILE_TYPE  which  is  used  to  Identify  an  internal  file. 

file  node  -  A  node  whose  contents  are  an  Ada  external  file,  e.g.,  a  host  system  file,  a  device,  or  a 
queue. 

form  -  A  form  Is  a  two-dimensional  matrix  of  character  positions. 

group  -  A  collection  of  nodes  representing  roles  and  identified  by  a  structural  node  with  emanating 
relationships  of  the  predefined  relations  POTENTLAL_MEMBER  and  PERMANENT _  MEMBER 
identifying  each  of  the  group's  members.  A  member  may  be  a  user  top-level  node,  a  node 
representing  the  executable  image  of  a  program,  or  a  node  representing  a  group. 

illegal  identification  -  A  node  identification  In  which  the  pathname  or  the  relationship  key  or 
relation  name  is  syntactically  Illegal  with  respect  to  the  syntax  defined  In  Table  1. 

inaccessible  -  The  subject  has  not  (adopted  a  role  which  has)  been  granted  the  access  right  of 
EXISTENCE  to  the  object. 

initiate  -  To  place  a  program  into  execution;  In  the  CAIS,  this  means  a  process  node  is  created,  a 
process  is  created  as  Its  contents,  required  resources  are  allocated,  and  execution  Is  started. 

initiated  process  -  The  process  whose  program  has  been  placed  Into  execution. 

initiating  process  -  The  process  placing  a  program  into  execution. 

interface  -  [DACS]  A  shared  boundary. 

internal  file  -  A  file  which  Is  Internal  to  a  CAJS  process.  Such  a  file  Is  Identified  by  a  file  handle. 

iterator  -  A  variable  which  provides  the  bookkeeping  Information  necessary  for  Iteration  over  nodes 
(a  node  Iterator)  or  attributes  (an  attribute  Iterator). 

job  -  A  process  node  tree,  spanned  by  primary  relationships,  which  develops  under  a  root  process 
node  as  other  (dependent)  processes  are  Initiated  for  the  user. 

key  -  See  relaticc  ihip  key.  The  key  of  a  node  Is  the  relationship  key  of  the  last  element  of  the 
node's  pathname. 

label  group  (of  a  magnetic  tape)  -  One  of  the  following:  (I)  a  volume  header  and  a  flic  header  label, 
(II)  a  file  header  label,  or  (ill)  an  end-of-flle  label. 
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granted  by  an  object  to  adopters  of  that  role;  In  the  CAJS  this  Is  accomplished  by  establishing  a 
secondary  relationship  of  the  predefined  relation  ADOPTED _ ROLE  from  the  process  node  to  the 
node  representing  the  role. 

adopted  role  of  a  proceaa  -  The  access  rights  associated  with  the  node  that  is  the  target  or  a 
relationship  of  the  predefined  relation  ADOPTED_ROLE  emanating  from  the  process  node  or  with 
any  group  node  one  of  whose  permanent  members  Is  the  target  of  such  a  relationship. 

advance  (of  an  active  position)  -  (1)  Scroll  or  page  terminal;  Occurs  whenever  (I)  the  row  number  of  a 
new  position  Is  greater  than  the  row  number  of  the  old  or  (II)  the  row  number  of  the  new  position  is 
the  same  and  the  column  number  of  the  new  position  is  greater  than  that  of  the  old.  (2)  Form 
terminal:  Occurs  whenever  the  indices  of  Its  position  are  Incremented. 

approved  access  rights  -  Access  rights  whose  names  appear  in  resulting  rights  lists  of  relevant 
grant  Items  for  which  either  (1)  the  necessary  right  Is  null  or  (II)  the  necessary  right  Is  an  approved 
access  right. 

area  qualifier  -  A  designator  for  the  beginning  of  a  qualified  area. 

attribute  -  A  named  value  associated  with  a  node  or  relationship  which  provides  Information  about 
that  node  or  relationship. 

closed  node  handle  -  A  node  handle  which  Is  not  associated  with  any  node, 
contents  -  A  file  or  process  associated  with  a  CAIS  node. 

couple  -  To  establish  a  correlation  between  a  queue  file  and  a  secondary  storage  file.  If  the  queue  rile 
Is  a  copy  queue  file.  Its  initial  contents  Is  a  copy  of  the  secondary  storage  file  to  which  it  is  coupled;  If 
the  queue  file  is  a  mimic  queue  rile,  its  initial  contents  Is  a  copy  of  the  secondary  storage  rile  to  which 
It  is  coupled,  and  elements  that  are  written  to  the  mimic  queue  file  are  appended  to  Its  coupled  file. 

current  job  -  The  root  process  node  of  the  tree  containing  the  current  process  node;  represented  by 
the  predefined  relation  CURRENT  _  JOB. 

current  node  -  The  node  that  Is  currently  th  •  focus  or  context  for  the  activities  of  the  current 
process,  represented  by  the  predefined  relation  CURRENT_  NODE. 

current  proceaa  -  The  currently  executing  process  making  the  call  to  a  CAJS  operation.  Pathnames 
are  Interpreted  In  the  context  of  the  current  process. 

current  uaer  -  The  user's  lop-level  node;  represented  by  the  secondary  relationship  of  the  predefined 
relation  CURRENT  _  USER. 

dependent  proceaa  -  A  process  other  than  a  root  process. 

device  [WEBS]  -  A  piece  of  equipment  or  a  mechanism  designed  to  serve  a  special  purpose  or  perform 
a  special  function. 

device  name  -  The  keys  of  a  primary  relationship  of  the  predefined  relation  DEVICE, 
discretionary  access  control  -  See  access  control. 
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3.  DEFINITIONS 


The  following  is  an  alphabetical  listing  of  terms  which  are  used  In  the  description  of  the  CAJS.  Where 
a  document  named  In  Section  2  was  used  to  obtain  the  definition,  the  definition  is  preceded  by  a 
bracketed  reference  to  that  document. 

abort  -  (IEEE!  To  terminate  a  process  prior  to  completion. 

mcceaa  -  [TCSEC]  A  specific  type  of  interaction  between  a  subject  and  an  object  that  results  in  the 
flow  of  information  from  one  to  the  other. 

mcceaa  checking  -  The  operation  of  checking  access  rights  against  those  rights  required  Tor  the 
Intended  operation,  according  to  the  access  control  rules,  and  either  permitting  or  denying  the 
Intended  operation. 

mcceaa  control  -  [TCSEC]  (1)  discretionary  access  control:  A  means  of  restricting  access  to  objects 
based  on  the  Identity  of  subjects  and/or  groups  to  which  they  belong.  The  controls  are  discretionary 
In  the  sense  that  a  subject  with  a  certain  access  permission  is  capable  of  passing  that  permission 
(perhaps  indirectly)  on  to  any  other  subject.  (2)  mandatory  access  control:  A  means  of  restricting 
access  to  objects  based  on  the  sensitivity  (as  represented  by  a  label)  of  the  information  contained  in 
the  objects  and  the  formal  authorization  (l.e.,  clearance)  of  subjects  to  access  information  of  such 
sensitivity.  In  the  CAIS,  this  includes  specification  of  access  rights,  access  control  rules  and  checking 
of  access  rights  in  accordance  with  these  rules. 

mcceaa  control  conatrminta  -  The  resulting  restrictions  placed  on  certain  kinds  of  operations  by 
access  control. 

mcceaa  control  information  -  All  the  Information  required  to  perform  access  checking. 

mcceaa  control  rulea  -  The  rules  describing  the  correlations  between  access  rights  and  those  rights 
required  Tor  an  intended  operation. 

mcceaa  relationship  -  A  relationship  of  the  predefined  relation  ACCESS, 
mcceaa  rights  -  Descriptions  of  the  kinds  of  operations  which  can  be  performed. 

mcceaa  to  m  node  -  Reading  or  writing  or  the  contents  of  the  Dode,  reading  or  writing  of  attributes  of 
the  node,  reading  or  writing  of  relationships  emanating  from  a  node  or  of  their  attributes,  and 
traversing  a  node  as  Implied  by  a  pathname. 

accessible  -  The  subject  has  (adopted  a  role  which  has)  been  granted  the  access  right  EXISTENCE 
to  the  object. 

active  position  -  The  position  at  which  a  terminal  operation  is  to  be  performed. 

Ada  Programming  Support  Environment  (APSE)  -  [UK  Ada  Study,  STONEMAN)  A  set  of 
hardware  and  software  facilities  whose  purpose  Is  to  support  the  development  and  maintenance  of 
Ada  applications  sofiware  throughout  its  life-cycle  with  particular  emphasis  on  software  for  embedded 
computer  applications.  The  principal  features  are  the  database,  the  Interfaces  and  the  tool  set. 

mdopt  a  role  -  The  action  of  a  process  to  acquire  the  access  rights  which  have  been  or  will  be 
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2.  REFERENCED  DOCUMENTS 


2.1.  Issues  of  documents 

The  following  documents  of  the  Issue  In  effect  on  date  of  Invitation  for  bids  or  request  for  proposal 
form  a  part  of  this  standard  to  the  extent  specified  herein. 

[LRM|:  Reference  Manual  for  the  Ada  Programming  Language,  ANSI/MII.<-STD-1815A;  United  Stales 
Department  of  Defense;  January  1883. 

(Copies  of  specifications,  standards,  drawings,  and  publications  required  by  contractors  in  connection 
with  specific  procurement  functions  should  be  obtained  from  the  procuring  activity  or  as  directed  by 
the  contracting  officer.) 


2.2.  Other  publications 

The  following  documents  form  a  part  of  the  standard  to  the  extent  specified  herein.  Unless  otherwise 
Indicated,  the  issue  in  effect  on  date  of  Invitation  for  bids  or  request  for  proposal  shall  apply. 

(ANSI  78]:  American  National  Standards  Institute,  Magnetic  Tape  Labels  and  File  Structure  for 
In  formation  Interchange  (ANSI  Standard  xS. 27-1978).  (Application  for  copies  should  be  addressed 
to  American  National  Standards  Institute,  Inc.,  1430  Broadway.  New  York,  NY  10018) 

[DACS]:  DACS  Glossary,  a  Bibliography  of  Software  Engineering  Terms.  GLOS-1,  October  1870,  Data 
and  Analysis  Center  for  Software.  (Application  for  copies  should  be  addressed  to  Data  and  Analysis 
Center  Tor  Software,  RADC/ISISI,  Grtfflss  AFB.  NY  13441) 

[IEEE] :  IEEE  Standard  Glossary  of  Software  Engineering  Terminology,  ANSI/IEEE  Std.  728-1883. 
(Application  for  copies  should  be  addressed  to  Sales  Department,  American  National  Standards 
Institute,  1430  Broadway,  New  York,  NY  10018) 

[STONEMAN]:  Requirements  for  Ada  Programming  Support  Environments,  STONEMAN; 

Department  of  Defense;  February  1880. 

[TCSEC]:  Department  of  Defense  Trusted  Computer  System  Evaluation  Criteria.  Department  of 
Defense  Computer  Security  Center,  CSC-STD-00J-83,  15  August  1983.  (Application  for  copies  should 
be  addressed  to  Department  of  Defense,  Computer  Security  Center,  Office  of  Standards  and  Products, 
Attention:  Chief,  Computer  Security  Standards,  Fort  George  G.  Meade,  Maryland  20755.) 

[UK  Ada  Study]:  United  Kingdom  Ada  Study  Final  Technical  Report,  Volume  I,  London.  Department 
of  Industry,  1881.  (Application  for  copies  should  be  addressed  to  Scientific  Information  Office,  British 
Defence  Staff,  British  Embassy,  3100  Massachusetts  Avenue,  NW,  Washington,  D  C.  20008.) 

[WEBS]:  Webster's  New  Collegiate  Dictionary,  G.&C.  Merriam  Company,  Springfield,  Massachusetts. 

1879. 
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used  by  loot  sets  to  constrain  nodes,  attributes,  and  relations,  but  It  does  not  enforce  a 
particular  methodology.  Currently  deferred  Is  a  decision  whether  or  not  the  CAJS  should 
enforce  a  particular,  more  complete  typing  methodology  and  what  kind  of  CAJS  interfaces 
should  be  made  available  to  support  It. 

Archiving.  The  current  CAJS  does  not  define  facilities  for  archiving  data.  Currently 
deferred  Is  a  decision  regarding  the  form  that  archiving  Interfaces  should  take. 
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b.  Processes.  This  area  covers  program  Invocation  and  control. 

c.  Input  and  Output.  This  area  covers  file  Input  and  output,  basic  device  Input  and  output 
support,  special  device  control  facilities,  and  Interprocess  communication. 

d.  Utilities.  This  area  covers  list  operations  useful  for  manipulation  of  parameters  and 
attribute  values. 


1.3.  Excluded  and  deferred  topics 

During  the  design  of  the  CAJS  it  was  determined  that  Interfaces  for  environments  which  are  not 
software  development  environments  (for  example,  interfaces  on  target  systems)  and  Interfaces  for 
multilingual  environments  should  be  explicitly  excluded.  It  has  been  decided  that  backup  facilities 
will  be  supported  transparently  by  the  CAIS  implementation.  While  the  interface  issues  of  most 
aspects  of  environments  were  considered,  the  complete  resolution  of  several  areas  has  been  deferred 
until  later  revisions  of  the  CAIS.  These  areas  are: 

a.  Configuration  management.  The  current  CAIS  supports  facilities  for  configuration  control 
Including  keeping  versions,  referencing  the  latest  revision.  Identifying  the  state  of  an 
object,  etc.:  but  It  does  not  implement  a  particular  methodology.  Currently  deferred  Is  the 
decision  whether  or  not  the  CAIS  should  enforce  a  particular  configuration  management 
approach  and.  If  so,  what  particular  methodology  should  be  chosen. 

b.  Device  control  and  resource  management.  The  current  CAJS  provides  control  facilities  for 
scroll,  page  and  form  terminals  and  magnetic  tape  drives.  Currently  deferred  Is  the 
decision  as  to  what  additional  devices  or  resources  must  be  supported  by  the  CAIS.  Such 
resources  and  devices  might  include  printers,  disk  drives,  color  terminals,  vector-  and  bit- 
addressable  graphics  devices,  processor  memorv,  processor  time,  communication  paths,  etc. 

Also  deferred  is  a  decision  regarding  which  other  American  National  Standards  Institute  or 
International  Standards  Organization  interfaces  to  adopt,  such  as  the  ISO/'DIS  7912 
Graphical  Kernel  System  (GKS). 

c.  Distributed  environments.  The  existing  CAIS  p.tckages  are  Intended  to  be  Implcmentable 
on  a  distributed  set  of  processors,  but  in  a  manner  that  Is  transparent  to  a  tool.  Currently 
deferred  Is  the  deebion  whether  or  not  to  provide  to  the  user  explicit  CAIS  interfaces  to 
control  the  distribution  of  the  environment.  Including  do-ignatlon  of  where  nodes  exist  and 
where  execution  takes  place.  Note  that  a  set  of  distribut'd  processors  could  include  one  or 
more  target  machines. 

d.  Intcr-tool  interfaces.  The  current  CAIS  docs  not  define  inter-tool  calling  sequences  or  data 
formats  such  as  the  data  formal  within  the  compilation/program  library  system,  the  text 
format  within  editing  systems,  the  command  processor  language  syntax,  the  message 
formats  of  a  mall  system,  or  the  Interaction  between  the  run-time  system  and  debugger 
tools.  Currently  deferred  are  decisions  regarding  what  Inter-tool  data  should  become  part 
of  the  standard,  what  form  such  Interfaces  should  take,  and  whether  or  not  to  place 
constraints  on  the  run-time  system  to  provide  process  execution  Information. 

e.  Interoperability.  The  current  CAIS  provides  only  a  very  primitive,  text-oriented  Interface 
for  transferring  files  between  a  CAIS  Implementation  and  the  operating  system  on  which  It 
ma.v  reside.  It  does  not  define  external  representations  of  data  for  transfer  between 
en\  Ironments  or  between  a  host  and  target. 

f.  Typing  methodology.  The  current  CAIS  provides  attributes  and  relations  which  can  be 
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1.  SCOPE 


1.1.  Purpose 

This  document  provides  specifications  for  a  sot  of  Ada  packages,  with  their  Intended  semantics.  which 
together  form  the  set  of  common  interfaces  for  Ada  Programming  Support  Environments  (APSEs). 
This  set  of  interfaces  Is  known  as  the  Common  APSE  Interface  Set  (CAJS).  This  interface  sot  is 
designed  to  promote  the  source-tevel  portability  of  Ada  programs,  particularly  Ada  software 
development  toots. 

The  CAJS  applies  to  Ada  Programming  Support  Environments  which  are  to  become  the  basic 
software  life-cycle  environments  for  Department  of  Defense  (DoD)  mission  critical  computer  systems 
(MCCS).  Those  Ada  programs  that  are  used  in  support  of  software  development  are  defined  as  tools. 
This  includes  the  spectrum  of  support  software  from  project  management  through  code  development, 
configuration  management  and  life-cycle  support.  Tools  are  not  restricted  to  only  those  software 
Items  normally  associated  with  program  generation,  such  as  editors,  compilers,  debuggers,  and  linker- 
loaders.  Groups  of  tools  that  are  composed  of  a  number  of  independent  but  interrelated  programs 
(such  as  a  debugger  which  is  related  to  a  specific  compiler)  are  classed  as  tool  sets'  . 

Since  the  goal  of  the  CAJS  is  to  promote  It  teroperability  and  transportability  of  Ada  software  across 
DoD  APSEs,  the  following  definitions  of  these  terms  are  provided. 

Interoperability  Is  defined  as  the  ability  of  APSEs  to  exchange  data  base  objects  and  their 
relationships  In  forms  usable  by  tools  and  user  programs  without  conversion.  Transportability  of 
an  APSE  tool  is  defined  as  the  ability  of  the  tool  to  be  installed  on  a  different  KAPSE;  the  tool 
must  perform  with  the  same  functionality  in  both  APSEs.  Transportability  Is  measured  In  the 
degree  to  which  this  installation  can  be  accomplished  w'thout  reprogramming.  Portability  and 
transferability  are  commonly  used  synonyms.2 

The  CAIS  is  intended  to  evolve  as  APSEs  are  Implemented,  as  tools  are  transported,  and  as  tool 
Interoperability  Issues  are  encountered.  Tools  written  In  Ada.  using  only  the  packages  described 
herein,  should  be  transportable  between  CAJS  implementations.  WhPre  tools  function  as  a  set,  the 
CAIS  facilitates  transportability  of  the  tool  set  as  a  whole:  tools  might  not  be  individually 
transportable  becau  -e  they  depend  on  inputs  from  other  tools  In  the  set. 


1.2.  Content 

The  CAIS  establishes  Interface  requirements  for  the  transportability  of  Ada  tool  sets  to  be  used  in 
Department  of  Defense  (DoD)  APSEs.  Strict  adherence  to  this  Interface  set  will  ensure  that  Ada  tool 
sets  will  possess  the  highest  degree  of  transportability  across  conforming  APSEs. 

The  scope  of  the  CAIS  Includes  Interfaces  to  those  services,  traditionally  provided  by  an  operating 
system,  that  affect  tool  transportability.  Ideally,  all  APSE  tools  would  be  Implcmentable  using  only 
the  Ada  language  and  the  CAIS.  The  CAJS  Is  Intended  to  provide  the  transportability  Interfaces 
most  often  required  by  common  software  development  tools  and  Includes  Tour  Interface  areas: 

a.  Node  Model.  This  area  presents  a  model  for  the  CAJS  In  which  contents,  relationships  and 
attributes  of  nodes  are  defined.  Also  included  are  the  foundations  for  access  control  and 
access  synchronization. 


'Requirements  for  Ails  Progrnmminq  Support  Environments.  STO\EMA\:  Department  of  Defense:  Frbrimrt  1980. 
^KAfSE  Inter  fare  Team:  Ptiblir  Report,  \olume  I.  I  April  19*2:  p.  Cl. 
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structural  node  -  A  node  without  contents.  Structural  nodes  are  used  strictly  as  holders  of 
relationships  and  attributes. 

subject  -  [TCSEC]  An  active  entity,  generally  In  the  form  of  a  person,  process,  or  device,  that  causes 
Information  to  flow  among  objects  or  changes  the  system  state.  In  the  CAJS,  a  subject  Is  always  a 
process. 

ayatem-level  node  -  The  root  of  the  CAIS  primary  relationship  tree  which  spans  the  entire  node 
structure. 

target  node  -  The  node  at  which  a  relationship  terminates. 

task  -  (LRM]  A  task  operates  in  parallel  with  other  parts  of  the  program. 

termination  of  a  process  -  Termination  (see  [LRM]  0.4)  of  the  execution  of  the  subprogram  which 
Is  the  main  program  (see  [LRM]  10.1)  of  the  process. 

token  -  An  internal  representation  of  an  identifier  which  can  be  manipulated  as  a  list  Item. 

tool  -  [IEEE  -  software  tool]  A  computer  program  used  to  help  develop,  test,  analyze,  or  maintain 
another  computer  program  or  Its  documentation;  for  example,  an  automated  design  tool,  compiler, 
test  tool,  or  maintenance  tool. 

top-level  node  •  A  structural  node  representing  the  user.  Each  user  has  a  top-level  node. 

track  -  (1)  An  open  node  handle  Is  guaranteed  always  to  refer  to  the  same  node,  regardless  of  any 
changes  to  relationships  that  could  cause  pathnames  to  become  invalid  or  to  refer  to  different  nodes. 
An  open  node  handle  Is  said  to  track  the  node  to  which  it  refers.  (2)  Secondary  relationships. 

traversal  of  a  node  •  Traversal  of  a  relationship  emanating  from  the  node. 

traversaJ  of  a  relationship  -  The  act  of  following  a  relationship  from  its  source  node  to  Its  target 
node. 

unique  primary  path  -  The  path  from  the  system-level  node  to  a  given  node  traversing  only 
primary  relationships.  Every  node  that  Is  not  unobtainable  has  a  unique  primary  path. 

unique  primary  pathname  •  The  pathname  associated  with  the  unique  primary  path. 

unnamed  item  -  No  name  is  associated  with  a  list  item. 

unnamed  list  -  A  list  whose  items  are  all  unnamed. 

unobtainable  -  A  node  Is  unobtainable  If  It  Is  not  the  target  of  any  primary  relationship. 

user  -  An  Individual,  project,  or  other  organizational  entity.  In  the  CAIS  it  Is  associated  with  a  lop- 
level  node. 

user  name  -  The  key  of  a  primary  relationship  of  the  predefined  relation  USER. 
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4.  GENERAL  REQUIREMENTS 


4.1.  Introduction 

The  CAJS  provides  Interfaces  for  data  storage  and  retrieval,  data  transmission  to  and  from  external 
devices,  and  activation  of  programs  and  control  of  their  execution.  In  order  to  achieve  uniformity  In 
the  Interfaces,  a  single  model  Is  used  to  consistently  describe  general  data  storage,  devices  and 
executing  programs.  This  approach  provides  a  single  model  for  understanding  the  CAIS  concepts;  it 
provides  a  uniform  understanding  of  and  emphasis  on  data  storage  and  program  control;  and  it 
provides  a  consistent  way  of  expressing  Interrelations  both  within  and  IxHween  data  and  executing 
programs.  This  unified  model  Is  referred  to  as  the  node  model. 

Section  4.2  discusses  how  the  interfaces  are  described  in  the  remainder  of  Section  4  and  in  Section  5. 
Section  4.3  describes  the  node  model.  Section  4.4  describes  the  mandatory  and  discretionary  access 
control  model  Incorporated  In  the  CAJS.  Section  4.5  describes  limits  and  constraints  not  defined  by 
the  Interfaces.  Section  5  provides  detailed  descriptions  of  the  Interfaces.  Section  6  provides 
Information  on  the  intended  use  of  this  document  and  relevant  keywords  for  use  by  automated 
document  retrieval  systems. 

Appendix  A  provides  descriptions  of  the  entities  predefined  In  the  CAIS.  This  appendix  constitutes  a 
mandatory  part  of  this  standard. 

Appendix  B  provides  a  set  of  the  Ada  package  specifications  which  have  been  organized  for 
compilation  of  the  CAIS  Interfaces.  Appendix  C  provides  a  set  of  the  corresponding  Ada  package 
bodies.  Appendix  D  provides  a  list  of  all  CAIS  procedures  and  functions  organized  by  the  packages  in 
which  they  appear. 


4.2.  Method  of  description 

The  specifications  of  the  CaIS  Interfaces  are  divided  Into  two  parts; 

a.  the  syntax  as  defined  by  a  canonical  Ada  package  specification,  and 

b.  the  semantics  as  defined  by  the  descriptions  both  of  the  general  node  model  and  of  the 
particular  packages  and  procedures. 

The  Ada  package  specifications  given  In  this  document  arr  te.med  canonical  because  they  are 
representative  or  the  form  of  the  allowable  actual  Ada  package  sp  •clflcatlons  In  any  particular  CAIS 
Implementation.  The  packages  which  together  provide  an  Implementation  of  these  specifications  must 
have  Indistinguishable  syntax  and  semantics  from  those  stated  herein. 


4.2.1.  Allowable  differences 

The  packages  which  together  provide  a  particular  Implementation  of  the  CAJS  must  have  the 
following  properties; 

a.  Any  Ada  program  that  Is  legal  and  not  erroneous  In  the  presence  of  the  canonical  package 
specifications  as  library  units  must  be  legal  and  not  erroneous  If  the  canonical  packages  are 
replaced  by  the  packages  of  a  particular  CAIS  implementation  and  the  names  of  additional 
library  units  required  for  the  Implementation  of  this  particular  CAIS  are  not  In  conflict 
with  the  names  of  library  units  required  by  the  Ada  program.  [Note;  It  Is  recommended. 
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although  not  required,  that  any  Ada  program  that  Is  Illegal  In  the  presence  of  the 
canonical  package  specifications  as  library  units  Is  also  Illegal  if  the  canonical  packages  are 
replaced  by  the  packages  of  a  particular  CAIS  Implementation.] 

b.  The  CAJS  Interfaces  provided  by  the  subprograms  declared  In  the  packages  of  a  particular 
CAIS  Implementation  must  have  the  semantics  described  In  this  document  for  the 
corresponding  subprograms  In  the  canonical  package  specifications. 

The  actual  Ada  package  specifications  of  a  particular  Implementation  may  differ  from  the  canonical 
specifications  as  long  as  properties  (a)  and  (b)  are  preserved. 


4.2.2.  Semantic  descriptions 

The  Interface  semantics  are  described  In  most  cases  through  narrative.  These  narratives  are  divided 
Into  as  many  as  five  paragraphs.  The  Purpose  paragraph  describes  the  function  of  the  Interface.  The 
Parameters  paragraph  briefly  describes  each  of  the  parameters,  smd  the  Exceptions  paragraph  briefly 
describes  the  conditions  under  which  each  exception  Is  raised.  Any  relevant  Information  that  does  not 
fall  under  one  of  these  three  headings  is  included  In  a  Notes  paragraph.  In  cases  where  an  interface  is 
overloaded  and  the  additional  versions  can  be  described  in  terms  of  the  basic  form  of  the  interface 
and  other  CAIS  'nterfaccs,  these  versions  are  described  in  a  paragraph,  called  Additional  Interfaces, 
using  Ada.  This  method  of  presenting  the  semantics  of  the  Additional  Interfaces  is  a  conceptual 
model.  It  does  not  imply  that  the  Additional  Interfaces  must  be  implemented  in  terms  or  the  existing 
ones  exactly  as  specified,  merely  that  their  behavior  Is  equivalent  to  such  an  implementation.  The 
semantics  described  In  the  Purpose,  Parameters  and  Exceptions  apply  only  to  the  principal  interface; 
the  Additional  Interfaces  may  have  additional  semantics  as  Implied  by  the  given  package  bodies. 


4.2.3.  Typographical  conventions 

This  document  follows  the  typographical  conventions  of  [LRM]  where  these  are  not  In  conflict  with 
those  of  a  MIL-STD.  In  particular: 

a.  boldface  type  is  used  for  Ada  language  reserved  words, 

b.  UPPER  CASE  Is  used  Tor  Ada  language  Identifiers  which  are  not  reserved  words, 

c.  in  the  text,  syntactic  category  names  are  written  in  normal  typeface  with  any  embedded 
underscores  removed, 

d.  in  the  text,  where  reference  is  made  to  the  actual  value  of  an  Ada  variable  (for  example,  a 
procedure  parameter),  the  Ada  name  Is  used  In  normal  typeface.  However,  where 
reference  Is  made  to  the  Ada  object  itself  (see  [LRM]  3.2  for  this  use  of  the  word  object), 
then  the  Ada  name  Is  given  In  upper  case,  Including  any  embedded  underscores.  For 
example,  from  [LRM]  H.2.I  paragraphs  17,  18  and  IB 

function  MODE(FILE:  in  FILE_TYPE)  return  FILE_MODE; 

Returns  the  current  mode  of  the  given  nie. 
but 


The  exception  STATUS  _  ERROR  Is  raised  If  the  file; 
Is  not  open. 
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e.  at  the  place  where  a  technical  term  Is  first  Introduced  and  defined  In  the  text,  the  term  Is 
given  In  an  italic  typeface. 

4.3.  CAIS  node  model 

The  CAJS  provides  Interfaces  for  administering  entitles  relevant  during  the  software  life-cycle  such  as 
files,  directories,  processes  and  devices.  These  entities  have  various  properties  and  may  have  a  variety 
of  Interrelations.  The  CAJS  model  uses  the  concept  of  a  node  as  the  carrier  of  Information  about  an 
entity.  It  uses  the  concept  of  a  relationship  for  representing  an  interrelation  between  two  entitles 
and  the  concept  of  an  attribute  for  representing  a  property  of  an  entity  or  of  an  Interrelation. 

The  model  of  the  structure  underlying  the  CAJS  and  reflecting  the  interrelations  of  entitles  Is  a 
directed  graph  of  nodes,  which  form  the  vertices  of  the  graph,  and  relationships,  which  form  the  edges 
of  the  graph.  This  model  is  a  conceptual  model.  It  does  not  Imply  that  an  implementation  of  the 
CAIS  must  use  a  directed  graph  to  represent  nodes  and  their  relationships. 

Both  nodes  and  relationships  possess  attributes  describing  properties  of  the  entitles  represented  by 
nodes  and  of  Interrelations  represented  by  relationships. 


4.3.1.  Nodes 

The  CAJS  Identifies  three  different  kinds  of  nodes:  structural  nodes,  file  nodes  and  process  nodes.  A 
node  may  have  contents,  relationships  and  attributes.  The  contents  vary  with  the  kind  or  node.  If  a 
node  Is  a  file  node,  the  contents  Is  an  Ada  external  file.  There  are  four  types  of  CAJS  supported  Ada 
external  files:  secondary  storage,  queue,  terminal,  and  magnetic  tape.  The  Ada  external  file  may 
represent  a  host  file,  a  device  (sueh  as  a  terminal  or  tape  drive)  or  a  queue  (as  used  for  process 
Intercommunication),  if  a  node  Is  a  process  node,  the  contents  is  a  representation  or  the  execution  or 
an  Ada  program.  If  a  node  Is  a  structural  node,  there  Is  no  contents  and  the  node  Is  used  strictly  as  a 
holder  of  relationships  and  attributes.  The  kind  of  a  node  Is  a  predefined  and  Implicitly  established 
attribute  on  every  relationship  which  points  to  the  node. 

Nodes  can  be  created,  renamed,  accessed  (as  part  of  other  operations),  and  deleted. 


4.3.2.  Processes 

A  process  Is  the  CAIS  mechanism  used  to  represent  the  execution  of  an  Ada  program.  A  process  Is 
represented  as  the  contents  of  a  process  node.  The  process  node  and  Its  attributes  and  relationships 
are  also  used  to  bind  to  an  execution  the  resources  (such  as  flies  and  devices)  required  by  the  process. 
Taken  together,  the  process  node.  Its  attributes,  relationships  and  contents  are  used  In  the  CAJS  to 
manage  the  dynamics  of  the  execution  of  a  program.  Each  time  execution  of  a  program  is  initiated,  a 
process  node  Is  created,  the  process  Is  created,  the  necessary  resources  to  support  the  execution  of  the 
program  are  allocated  to  the  process,  and  execution  Is  started.  The  newly  created  process  Is  called 
the  initiated  process,  while  the  process  which  caused  the  creation  of  that  process  Is  called  the 
initiating  process. 

A  single  CAiS  process  represents  the  execution  of  a  single  Ada  program,  even  when  that  program 
Includes  multiple  tasks.  Within  the  process,  Ada  tasks  execute  In  parallel  (proceed  Independently) 
and  synchronize  In  accordance  with  the  rules  In  [LRMJ  0.  paragraph  5: 

Parallel  tasks  may  be  Implemented  on  multlcomputers,  multiprocessors,  or  with  Interleaved 
execution  on  a  single  physical  processor.  On  the  other  hand,  whenever  an  Implementation  can 
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detect  that  the  same  effect  can  be  guaranteed  If  parts  of  the  actions  of  a  given  [Ada  task  arc 
executed  by  different  physical  processors  acting  In  parallel,  It  may  choose  to  execute  them  In  this 
way;  In  such  a  case  several  physical  processors  Implement  a  single  logical  processor 

When  a  task  makes  a  CAIS  call,  execution  of  that  task  Is  blocked  until  the  CAJS  call  returns  control 
to  the  task.  Other  tasks  In  the  same  process  may  continue  to  execute  In  parallel,  subject  to  the  Ada 
tasking  rules.  If  calls  on  CAIS  Interfaces  are  enacted  concurrently,  the  CAJS  does  not  specify  their 
order  of  execution. 

Processes  are  analogous  to  Ada  tasks  In  that  they  execute  logically  In  parallel,  have  mechanisms  for 
Interprocess  synchronization,  and  can  exchange  data  with  other  processes.  However,  processes  and 
Ada  tasks  are  dissimilar  In  certain  critical  ways.  Data,  procedures  or  tasks  In  one  process  cannot  be 
directly  referenced  from  another  process.  Also,  while  tasks  In  a  program  are  bound  together  prior  to 
execution  time  (at  compile  or  link  time),  processes  are  not  bound  together  except  by  cooperation  using 
CAJS  facilities  at  run  time. 


4.3.3.  Input  and  output 

Ada  Input  and  output  In  [LRMj  14  Involves  the  transfer  of  data  to  and  from  Ada  external  files.  CAJS 
Input  and  output  uses  the  same  model  and  involves  the  transfer  of  data  to  and  from  the  contents  of 
CAIS  file  nodes.  These  file  nodes  may  represent  disk  or  other  secondary  storage  files,  magnetic  tape 
drives,  terminals,  or  queues. 

CAJS  file  nodes  represent  Information  about  and  contain  Ada  external  flies.  The  underlying  model  for 
the  contents  of  such  a  node  is  that  of  a  file  of  data  Items,  accessible  either  sequentially  or  directly  by 
some  Index.  The  packages  specified  In  Section  5.3  provide  facilities  that  operate  on  CAJS  external 
riles. 

Implementations  of  the  standard  Ada  packages  SEQUENTIAL _IO,  DIRECT_IO,  and  TEXT_IO 
specified  in  the  [LRM]  that  operate  upon  CAJS  flies  are  to  be  constructed  such  that  they  meet  the 
Ada  standard  and  for  CREATE  and  OPEN  procedures; 

1.  The  semantics  of  th  •  use  of  the  default  value  of  the  FORM  parameter  FORM  :  IN  string 
:=  ""  Is  specified  within  the  context  of  the  node  model. 

2.  The  syntax  and  semantics  of  the  non  empty  FORM  parameter  Is  specified  within  the 
context  of  the  NODE  model. 

3.  Nothing  in  the  Implementation  can  violate  the  conclstancy  of  the  CAJS  NODE  model. 

The  Interfaces  In  the  package  MAGNETIC_TAPE  have  been  modeled  on  the  American  National 
Standards  Institute  standards  In  (ANSI  78]. 


4.3.4.  Relationships  and  relations 

The  relationships  of  CAIS  nodes  form  the  ed"'-s  of  a  directed  graph;  they  are  used  to  build 
conventional  hierarchical  directory  and  process  structures  (see  Section  5.1.5  STRUCTURAL_ NODES 
and  Section  5.2.2  PKOCESS_  CONTROL)  a*  well  as  arbitrary  dlrected-graph  structures. 
Relationships  are  unidirectional  and  are  said  to  emanate  from  a  source  node  and  to  terminate  at  a 
target  node.  A  relationship  may  also  have  attributes  describing  properties  of  the  relationship. 

Because  any  node  may  have  many  relationships  representing  many  different  classes  of  connections, 
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the  concept  of  a  relation  is  introduced  to  categorize  the  relationships.  Relations  Identify  the  nature 
of  relationships,  and  relationships  are  instances  of  relations.  Certain  basic  relations  are  predefined  by 
the  CA1S.  Their  semantics  are  explained  In  the  following  sections.  Additional  predefined  relations  are 
Introduced  In  Section  5  and  are  listed  in  Appendix  A.  Relations  may  also  be  defined  by  a  user  The 
CAJS  associates  only  the  relation  name  with  user-defined  relations;  no  other  semantics  are  supported. 

Each  relationship  is  Identified  by  a  relation  name  and  a  relationship  key.  The  relation  name 
identifies  the  relation,  and  the  relationship  key  distinguishes  between  multiple  relationships  each 
bearing  the  same  relation  name  and  emanating  from  a  given  node. 

Nodes  in  the  environment  are  attainable  by  following  relationships.  Operations  arr  provided  to 
traverse  a  relationship,  that  is,  to  follow  a  relationship  from  its  source  node  to  its  target  node. 

4.3. 4.1.  Kinds  of  relationship* 

There  are  two  kinds  of  relationships;  primary  and  secondary.  When  a  node  Is  created,  an  initial 
relationship  Is  established  from  some  other  node  to  the  newly  created  node.  This  Initial  relationship  is 
called  the  primary  relationship  to  this  new  node,  and  the  source  node  of  this  Initial  relationship  is 
called  the  parent  node.  In  addition,  the  new  node  will  be  connected  bark  to  this  parent  via  a 
relationship  of  the  predefined  relation  PARENT.  There  Is  no  requirement  that  all  primary 
relationships  emanating  from  a  node  have  the  same  relation  name.  Primary  relationships  form  a 
strictly  hierarchical  tree;  that  is,  for  every  node  (except  the  root)  there  Is  one  and  only  one  sequence 
or  primary  relationships  leading  to  It  from  the  node  that  Is  the  root  of  the  tree.  No  cycles  can  be 
constructed  using  only  primary  relationships. 

The  primary  relationship  Is  broken  by  DELETE_NODE  or  DELETE_TREE  operations.  After 
deletion  of  the  primary  relationship  to  a  node,  the  node  is  said  to  be  unobtainable .  A  non-existing 
node  is  one  which  has  never  been  created.  RENAME  operations  may  be  used  to  make  the  primary 
relationship  to  a  node  emanate  from  a  different  node  which  becomes  the  new  parent  of  the  node.  The 
operations  DELETE_NODE,  DELETE_TREE,  RENAME,  and  the  operations  creating  nodes  are  the 
only  operations  that  manipulate  primary  relationships.  They  maintain  a  slate  in  which  each  node  has 
exactly  one  parent  and  a  unique  primary  pathname  (see  Section  i.3.b). 

Secondary  relationships  are  arbitrary  connections  which  may  be  established  between  two  existing 
nodes;  secondary  relationships  may  form  an  arbitrary  directed  graph.  User-defined  secondary 
relationships  are  created  with  the  LINK  procedure  and  broken  with  the  UNLINK  procedure. 
Secondary  relationships  may  exist  to  unobtainable  nodes. 

4.3.4.2.  Basic  predefined  relations 

The  CAIS  predefines  certain  relations.  Relationships  belonging  to  a  predefined  relation  cannot  be 
created,  modified,  or  deleted  by  means  of  the  CAIS  Interfaces  and  their  relationship  keys  are  the 
empty  string,  except  where  explicitly  noted.  The  semantics  of  the  predefined  relations  which  are  basic 
to  the  node  model,  as  well  as  related  concept*  of  the  CAIS,  are  explained  In  this  Section  and  Section 
S.S.  The  basic  predefined  relations  explained  In  this  Section  are  USER,  DEVICE,  JOB. 
CURRENT _  JOB,  CURRENT _ USER  and  CURRENT _  NODE. 

The  CAIS  node  model  Incorporates  the  notion  of  a  user.  A  user  may  be  an  Individual,  project,  or 
other  organizational  entity;  this  notion  Is  not  equated  with  only  an  Individual  person.  Each  user  has 
one  top-level  node.  This  lop-level  node  Is  a  structural  node  which  represents  the  user  and  from  It  the 
user  can  access  other  structural,  file  and  process  nodes. 
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The  CAJS  node  model  Incorporates  the  notion  of  a  system.  This  notion  provides  the  means  of 
administering  all  the  entitles  represented  within  one  CAJS  Imp'  >  ntatlon.  This  notion  Implies  the 
existence  of  a  system-level  node  which  acts  as  the  root  of  the  CA  primary  relationship  tree  spanning 
the  entire  node  structure.  Each  top-level  node  Is  reachable  fror  the  system-level  node  along  a  primary 
relationship  of  the  predefined  relation  USER  emanating  from  ,e  system-level  node  The  key  of  this 
relationship  Is  the  user  name.  Each  user  name  has  a  top-lev.. i  node  associated  with  It.  The  system- 
level  node  cannot  be  accessed  explicitly  by  the  user  via  the  CAJS  Interfaces.  It  may  only  be 
manipulated  by  Interfaces  outside  the  CAJS,  e.g.,  to  add  new  relationships  of  the  predefined  relation 
USER  emanating  from  the  system-level  node. 

The  CAJS  node  model  Incorporates  the  notion  of  devices.  Each  device  Is  described  by  a  file  node.  This 
file  node  Is  reachable  from  the  system-level  node  along  a  primary  relationship  of  the  predefined 
relation  DEVICE  emanating  from  the  system-level  node.  The  key  of  this  relationship  Is  the  dexrice 
name.  The  CAJS  does  not  define  Interfaces  for  creating  nodes  which  represent  devices;  such  Interfaces 
are  to  be  provided  outside  the  CAJS. 

The  CAJS  node  model  incorporates  the  notion  of  a  job.  When  a  user  logs  onto  the  APSE  or  calls  the 
CREATE_JOB  procedure,  a  root  process  node  Is  created  which  often  represents  a  command 
Interpreter  or  other  user-communication  process.  It  Is  left  to  each  CAJS  Implementation  to  set  up 
methodology  for  users  to  log  onto  the  APSE  and  for  enforcing  any  constraints  that  limit  the  top-levc 
nodes  at  which  users  may  log  on.  After  logging  onto  the  APSE,  the  user  will  be  regarded  by  the  CAJS 
as  the  user  associated  with  the  top-level  node  at  which  he  logged  on.  A  process  node  tree,  spanned  by 
primary  relationships,  develops  from  the  root  process  node  as  other  processes  (called  dependent 
processes)  are  Initiated  for  the  user.  A  particular  user  may  have  several  root  processes  nodes 
concurrently.  Each  corresponding  process  node  tree  Is  referred  to  as  a  job.  The  predefined  JOB 
relation  Is  provided  for  locating  each  of  the  rcot  process  nodes  from  the  user's  top-level  node.  A 
primary  relationship  of  the  predefined  relation  JOB  emanates  from  each  user's  top-level  node  to  the 
root  process  node  of  each  of  the  user's  Jobs.  The  key  of  this  relationship  is  assigned  by  the  mechanism 
of  interpreting  the  LATEST_KEY  constant  (see  Section  A3. 5)  unless  otherwise  specified  In  the 
CREATE_JOB  procedure  call. 

While  the  CAJS  does  not  specify  an  Interface  for  creating  the  initial  root  process  node  when  a  user 
logs  onto  the  APSE,  the  effect  is  to  be  the  same  as  a  call  to  the  CREATE_JOB  procedure.  The 
secondary  relationships  which  the  implementation  must  establish  are  found  In  TABLE VII.  In 
particular,  secondary  relationships  of  the  predefined  relations  USER  and  DEVICE  must  be 
established,  with  the  appropriate  user  and  device  names  as  keys.  These  relationships  emanate  from 
the  root  process  node  being  created  to  an  implementation-defined  subset  of  top-level  nodes  and  file 
nodes  representing  devices,  respectively.  Dependent  process  nodes  In  the  job  Inherit  these 
relationships.  File  nodes  representing  devices  and  top-level  nodes  of  other  users  can  be  reached  from 
a  process  node  via  a  relationship  of  the  relation  DEVICE  or  USER  and  a  relationship  key  which  is 
Interpreted  as  the  respective  device  or  user  name. 

CURRENT _ JOB.  CURR ENT _ USER,  and  CURRENT_ NODE  are  predefined  relations  which 
provide  a  convenient  means  for  Identifying  other  CAJS  nodes.  The  relationship  of  the  predefined 
relation  CURRENT_JOB  always  points  to  the  root  process  node  of  a  process  node's  Job.  The 
relationship  of  the  predefined  relation  CURRENT_USER  always  points  to  the  user's  top-level  node. 
The  relationship  of  the  i  redefined  relation  CURRENT _  NODE  can  be  used  to  point  to  a  node  which 
represents  the  process'!  current  focus  or  context  for  Its  activities.  The  process  node  can  thus  use  the 
CURRENT _ NODE  f«n  a  base  node  when  specifying  pathnames  (see  Section  4.3.5).  The  CAIS 
requires  that,  when  a  root  process  node  Is  created.  It  has  a  relationship  of  the  predefined  relation 
CURRENT  NODE  pointing  to  the  top-level  node  for  the  user. 
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The  node  model  makes  use  of  the  concept  of  a  current  process.  This  concept  Is  Implicit  in  all  calls  to 
CAIS  operations  and  refers  to  the  process  for  the  currently  executing  program  making  the  Jl.  It 
defines  the  context  In  which  the  parameters  are  to  be  Interpreted.  In  particular,  pathnames  are 
determined  In  the  context  of  the  current  process. 


4.3.5.  Paths  and  pathnames 

Every  accessible  node  may  be  reached  by  following  a  sequence  of  relationships;  this  sequence  Is  called 
the  path  to  the  node.  A  path  starts  at  a  known  (not  necessarily  top-level)  node  and  follows  a 
sequence  of  relationships  to  a  desired  node.  The  path  from  the  system-level  node  to  a  given  node 
traversing  only  primary  relationships  Is  called  the  unique  primary  path  to  the  given  node. 

Paths  are  specified  using  a  pathname  syntax.  Starting  from  a  given  node,  a  path  Is  followed  by 
traversing  a  sequence  of  relationships  until  the  desired  node  Is  reached.  The  pathname  for  this  path 
Is  made  up  of  the  concatenation  of  the  names  of  the  traversed  relationships  In  the  same  order  In 
which  they  are  traversed. 

The  syntax  of  a  pathname  Is  a  sequence  of  path  elements,  each  path  element  representing  the 
traversal  of  a  single  relationship.  A  path  element  Is  an  apostrophe  (pronounced  "tick")  followed  by  a 
relation  name  and  a  parenthesized  relationship  key. 

Relation  names  and  relationship  keys  follow  the  syntax  of  Ada  Identifiers.  Upper  and  lower  case  are 
treated  as  equivalent  within  such  identifiers.  If  the  relationship  key  of  a  path  element  Is  the  empty 
string,  the  parentheses  may  be  omitted.  Thus,  'PARENT  and  'PARENTO  refer  to  the  same  node. 

The  CAJS  predefines  the  relation  DOT.  If  the  relation  name  In  a  path  element  Is  DOT,  then  the  path 
element  may  be  represented  simply  by  a  dot  ('.')  followed  by  the  relationship  key.  Thus, 
’DOT(TRACKER)  Is  the  same  as  .TRACKER.  Relationship  keys  or  relationships  of  the  DOT  telation 
may  not  be  the  empty  string.  Instances  of  the  DOT  relation  may  be  manipulated  by  the  u3er  within 
access  right  constraints.  Relationships  of  the  DOT  relation  are  not  restricted  to  be  primary 
relationships  and  are  not  associated  with  any  other  CAJS-specIflc  semantics. 

The  starting  point  for  Interpretation  of  a  pathname  Is  always  the  current  process  node.  A  pathname 
may  begin  simply  with  a  relationship  key,  not  prefixed  by  either  an  apostrophe  or  .  This  Is  taken 
to  mean  interpretation  following  a  relationship  emanating  from  the  current  node  with  the  relation 
name  DOT  and  with  the  given  key.  Thus  LANDING  _  SYSTEM  Is  the  same  as 
CURRENT  _  NODE.1AND1NG  _SYSTEM. 

For  example,  all  of  the  following  are  legal  node  pathnames,  and  they  would  all  refer  to  the  same  node 
If  the  relationship  of  the  predefined  relation  points  to  the  same  node  as  TJSER( JONES). TRACKER 
and  the  relationship  of  the  predefined  relation  points  to  the  same  node  as  'USER(JONES): 

a.  LANDING _SYSTEM’WITH_UNIT( RADAR) 

b  'USER( JONES). TRACKER. LA NDING_SYSTEM'WITH_UNIT(R AD AR) 

c.  'CURRENT_  USER.  TRACK  ER.1ANDING_  SYSTEM 'WITH  _lTNIT(  RADAR) 

A  pathname  may  also  be  a  .  This  Is  Interpreted  as  referring  to  the  current  process  node. 

By  convention,  a  relationship  key  ending  In  ’#’  Is  taken  to  represent  the  IATEST_KEY 
(lexicographically  last).  When  creating  a  node  or  relationship,  use  of  '#'  to  end  the  final  relationship 
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key  of  a  pathname  will  cause  a  relationship  key  tr  be  automatically  assigned.  lexicographically 
following  all  previous  relationship  keys  for  the  same  -elation  and  Initial  relationship  key  character 
sequence  of  relationships  emanating  from  that  partlculsr  node. 

Identification  of  a  node  Is  provided  by  a  pathname  <>r  by  a  given  node  and  an  Identification  of  a 
relationship  emanating  from  the  given  node  by  means  of  Its  relation  name  and  relationship  key.  The 
phrase  to  identify  means  to  provide  an  Identification  for  a  node.  A  node  Identification  Is  considered 
an  illegal  identification  If  either  the  pathname  or  the  relationship  key  or  the  relation  name  Is 
syntactically  illegal  with  respect  to  the  syntax  defined  in  Table  I.  An  illegal  Identification  is  treated  as 
an  Identification  for  a  non-existing  node. 

A  pathname  Implies  traversal  of  a  node  If  a  relationship  emanating  from  the  node  Is  traversed; 
consequently  all  nodes  on  the  path  to  a  node  are  traversed,  while  the  node  at  the  end  of  the  path  Is 
not  traversed.  An  Identification  that  would  require  traversal  of  an  unobtainable  or  Inaccessible  node  Is 
treated  as  the  identification  for  a  non-existing  node. 

The  pathname  associated  with  the  unique  primary  path  Is  called  the  unique  primary  pathname  of  the 
node.  The  unique  primary  pathname  of  the  node  Is  syntactically  Identical  to,  and  therefore  can  be 
used  as,  a  pathname  whose  interpretation  starts  at  the  current  process  node.  It  always  starts  with 
’USER(  user  _  name). 

When  Identifying  a  node,  use  of  to  end  any  relationship  key  in  the  pathname  Is  Interpreted  as 
the  relationship  key  of  an  existing  relationship,  lexicographically  following  all  other  keys  for  the  same 
relation  and  Initial  relationship  key  character  sequence  of  relationships  emanating  from  that  particular 
node. 
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Table  L  Pathname  BNF 


path  name::=  relaltonshlp_key{path_elemeni}  | 
path  _element{path_element}  |  : 

path_element:.=  ‘relation  _ name  [  (  [  relationship _  key  ]  )  ]  | 
.  relations!)  I  p  _  key 


relation  _  name::  =  identifier 
relatlonship_key::=  Identifier  |  [  Identifier  ]  # 


Note:  the  relation  name  DOT  must  have  a  non-empty  relationship  key. 


Notation: 

1.  Words  -  syntactic  categories 

2.  [  ]  -  optional  Items 

3.  {  }  -  an  Item  repeated  zero  or  more  times 

4.  |  -  separates  alternatives 


4.3.0.  Attributea 

Both  nodes  and  relationships  may  have  attributes  which  provide  information  about  the  node  or 
relationship.  Attributes  are  Identified  by  an  attribute  name.  Each  attribute  has  a  name  and  has  a 
list  of  the  values  assigned  to  It,  represented  using  the  LIST_ UTILITIES  type  called  LIST_TYTE 
(see  Section  5.4.1). 

Relation  names  and  attribute  names  both  have  the  same  form  (that  Is,  the  syntax  of  an  Ada 
Identifier).  Relation  names  and  node  attribute  names  for  a  given  node  must  be  different  from  each 
other;  relationship  attribute  names  are  In  a  separate  name  space. 

The  CAJS  predefines  certain  attributes  which  are  discussed  In  Section  5  and  listed  In  Appendix 
A.  Predefined  attributes  cannot  be  created,  modified  or  deleted  by  the  user,  except  where  explicitly 
noted.  The  user  can  also  create  and  manipulate  user-defined  attributes  (see  Section  5.1.3). 
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4.4.  Discretionary  and  mandatory  acceaa  control 

The  CAIS  specifies  mechanisms  for  discretionary  and  mandatory  access  control  (see  [TCSEC  )  These 
apecincatlons  are  only  recommendations.  Alternate  discretionary  or  mandatory  access  control 
mechanisms  can  be  substituted  by  an  Implementation  provided  that  the  semantics  of  all  Interfaces  in 
Section  5  (with  the  exception  of  Section  5.1.4)  are  Implemented  as  specified. 

In  the  CAJS,  access  control  refers  to  all  the  aspects  of  controlling  access  to  Information.  It  consists 

of: 


a.  access  control  rights  Descriptions  of  the  kinds  of  operations  which  can  be  performed. 

b.  access  control  rules  The  rules  describing  the  correlations  between  access  rights  and  those 
rights  required  for  an  Intended  operation. 

c.  access  checking  The  operation  of  checking  granted  access  rights  against  those  rights 
required  for  the  Intended  operation  according  to  the  access  control  rules,  and  either 
permitting  or  denying  the  Intended  operation. 


All  of  the  information  required  to  perform  access  checking  la  collectively  referred  to  as  access  control 
information.  The  resulting  restrictions  placed  on  certain  kinds  of  operations  by  access  control  are 
called  access  rights  constraints. 


4.4.1.  Node  acceaa 

In  the  CAIS.  the  following  operations  constitute  access  to  a  node: 

a.  reading  or  writing  of  the  contents  of  the  node. 

b.  reading  or  writing  of  attributes  of  the  node, 

c.  reading  or  writing  of  relationships  emanating  from  a  node  or  of  their  attributes,  and 

d.  traversing  a  node  (see  Section  1.3. 5). 

The  phrase  "reading  relationships'  Is  a  convenient  shorthand  meaning  either  traversing  relationships 
or  reading  their  attributes.  To  access  a  node,  then,  means  to  perform  any  of  the  nbove  access 
operations.  The  phrase  "to  obtain  access"  to  a  node  means  being  permitted  to  perform  certain 
operations  on  the  node  within  access  right  constraints.  Access  to  a  node  by  means  of  a  pathname  can 
only  be  achieved  If  the  current  process  has  the  respective  access  rights  to  the  node  as  well  as  to  any 
node  traversed  on  the  path  to  the  node. 

In  the  CAIS,  the  following  operations  do  not  constitute  access  to  a  node:  closing  node  handles  to  a 
node,  opening  a  node  with  Intent  EXISTENCE  (so1  TABLE  V),  reading  or  writing  of  relationships  of 
which  a  node  Is  the  target  or  of  the  attributes  of  such  relationships,  querying  the  kind  of  a  node  and 
querying  the  status  of  node  handles  to  a  node. 

A  node  Is  inaccessible  If  the  current  process  do  not  have  sufficient  discretionary  access  control 
rights  to  have  knowledge  of  the  node's  existence  <■'  If  mandatory  access  controls  prevent  Information 
(low  from  the  node  to  the  current  process.  The  property  of  Inaccessibility  is  always  relative  to  the 
access  rights  of  the  currently  executing  process,  while  the  property  of  unobtalnability  Is  a  properly  of 
the  node  alone. 
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4.4.2.  Discretionary  access  control 


Discretionary  access  control  is  a  means  of  restricting  access  to  objects  based  on  the  identity  of 
subjects  and/or  groups  to  which  they  belong.  The  controls  are  discretionary  in  the  sense  that  a 
subject  with  certain  access  permission  is  capable  of  passing  that  permission  (perhaps  indirectly) 
on  to  any  other  subject  [TCSEC]. 

In  the  CAJS,  an  oi;<  ct  Is  any  node  to  be  accessed  and  a  subject  Is  any  process  (acting  on  the  behalf  of 
a  given  user)  performing  an  operation  requiring  access  to  an  object.  Discretionary  access  control  Is 
used  to  limit  access  to  nodes  by  processes  running  programs  on  behalf  of  users  or  groups  of  users. 


An  object  can  have  established  for  It  a  secondary  relationship  of  the  predefined  relation  ACCESS 
which  specifies  the  kinds  of  operations  which  may  be  performed  on  it.  A  process  node  may  have  a 
secondary  relationship  of  the  ADOPTED  _ ROLE  relation  established  to  the  same  target  node  as  a 
predefined  relation  relationship.  The  information  provided  by  these  two  kinds  of  relationships 
determines  the  approved  access  rights  which  the  process  has  to  the  object  (see  Section  4.V2.3).  When 
the  process  tries  to  open  the  object  node,  the  access  rights  implied  by  the  INTENT  parameter  (see 
Section  5.1)  are  checked  against  these  approved  access  rights  to  determine  whether  the  process  can 
perform  the  operation  on  that  node. 


4.4.2. 1.  Establishing  gran  table  access  right* 

An  object  may  be  the  source  node  of  2ero  or  more  secondary  relationships  of  the  predefined  relation 
ACCESS  (called  access  relationships).  Each  access  relationship  has  a  predefined  attribute,  called 
GRANT,  which  specifies  what  access  rights  to  the  object  are  grantable  to  processes  (subjects). 

In  order  to  limit  the  set  of  nodes  to  which  access  relationships  can  be  established,  the  CAJS 
discretionary  access  control  model  requires  that,  upon  creation  or  a  root  process  node,  secondary 
relationships  of  the  predefined  relation  ALLOW_ACCESS  be  created.  These  relationships  emanate 
from  the  created  root  process  node  to  an  Implementation-defined  set  of  nodes.  The  CAJS 
Implementation  must  establish  at  least  the  secondary  relationship  of  the  predefined  relation 
ALLOW' _ ACCESS  with  the  user  name  as  key  from  the  root  process  node  to  the  user  top-level  node 
Ail  such  relationships  are  Inherited  by  the  process  nodes  created  under  the  root  process  node. 

Access  relationships  and  GRANT  attributes  are  established  for  objects  In  one  of  two  ways:  using  the 
Interfaces  provided  In  the  package  ACCESS_CONTROL  or  at  node  creation. 

The  SET _ ACCESS _ CONTROL  procedure  can  be  used  by  a  process  to  establish  an  access 
relationship  between  two  nodes  and  to  set  the  value  of  the  GRANT  attribute.  This  procedure  can  also 
be  used  to  change  the  value  of  the  GRANT  attribute  of  an  existing  access  relationship. 

Access  relationships  are  also  established  at  node  creation.  The  ACCESS_CONTROL  parameter 
provides  the  necessary  Information  In  two  parts.  One  part  provides  relationship  keys  which  are  used 
to  Identify  the  nodes  which  will  be  the  targets  of  the  new  access  relationships.  If  the  current  process 
node  has  a  relationship  of  the  relation  ALLOW1  _ ACCESS  whose  key  Is  one  of  the  keys  given  In  the 
parameter,  then  the  node  Identified  by  that  relationship  becomes  the  target  of  a  now  access 
relationship  from  the  created  node. 

The  other  part  of  the  ACCESS_CONTROL  parameter  gives  a  set  of  access  rights  for  each 
relationship  key.  These  access  rights  become  the  value  of  the  GRANT  attribute  of  the  access 
relationship  created  with  the  corresponding  key. 

The  ACCESS  CONTROL  parameter  specifies  the  Initial  access  control  Information  to  be  established 
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for  a  node  being  created  using  named  Ada  aggregate  syntax;  that  Is,  it  consists  of  a  list  of  Items  each 
of  which  has  a  name  (identifying  a  target  node  for  an  access  relationship)  followed  by  a  list  of  values 
for  the  GRANT  attribute. 

For  every  relationship  key  named  In  the  list  for  which  the  current  process  node  has  a  relationship  of 
the  predefined  relation  ALLOW _ ACCESS,  a  relationship  of  the  predefined  relation  ACCESS  with 
the  given  relationship  key  and  the  given  access  rights  value  for  Its  GRANT  attribute  value  is  created 
from  the  new  node  to  the  target  of  the  relationship  of  the  predefined  relation  ALLOW  _  ACCESS 

4.4. 2. 2.  Adopting  a  role 

In  the  CAJS.  a  role  Is  associated  with  a  set  of  access  rights  that  a  subject  can  acquire  when  it  acts 
under  authority  of  that  role.  Each  role  Is  associated  with  a  CAJS  user,  a  program  being  executed,  or  a 
particular  group  of  users,  programs  or  subgroups.  A  subject  (process)  may  act  under  the  authority  of 
several  roles.  Roles  can  be  acquired  dynamically. 

In  the  CAJS  a  role  Is  represented  by  a  node;  the  associated  access  right?  are  determined  by  access 
relationships  as  described  In  the  following  sections.  This  node  may  be  a  top-level  node  representing  a 
user,  a  node  containing  the  executable  Image  of  a  program,  or  a  structural  node  representing  a  group 
The  structural  node  representing  a  group  has  relationships  emanating  from  It  to  the  nodes  which 
represent  the  group's  members. 

Each  group  member  Is  Identified  either  by  a  primary  relationship  of  the  predefined  relation 
PERMANENT  _  MEMBER  or  by  a  secondary  relationship  of  the  predefined  relation 
POTENTIAL _ MEMBER  emanating  from  the  group  node.  The  phrase  permanent  member  of  a  group 
refers  to  any  node  reachable  from  a  node  representing  the  group  via  primary  relationships  of  the 
predefined  relation  PERMANENT _ MEMBER.  The  relation  PERMANENT _ MEMBER  may  be  used 
to  create  a  hierarchy  of  nodes  representing  roles  by  defining  members  of  a  group  that  are  themselves 
groups.  A  user  top-level  node  may  not  be  the  target  of  a  primary  relationship  of  the  predefined 
relation  PERMANENT  _ MEMBER  emanating  from  a  group  node  due  to  the  restriction  that  user 
top-level  nodes  can  only  have  a  primary  relationship  from  the  system-level  node. 

Secondary  relationships  of  the  predefined  relation  POTENTlAL_ MEMBER  are  used  to  Identify  those 
members  that  may  dynamically  acquire  membership  In  the  group.  The  phrase  potential  member  of  a 
group  refers  to  any  node  that  Is  the  target  of  a  relationship  or  the  predefined  relation 
POTENTIAL _ MEMBER  from  that  group  or  from  any  of  that  group's  permanent  members. 

When  a  process  adopts  a  particular  role,  a  secondary  relationship  of  the  predefined  relation 
ADOPTED  _ROLE  Is  created  from  the  process  node  to  the  node  representing  the  role.  There  may  be 
multiple  relationships  of  the  predefined  relation  ADOPTED_ROLE  emanating  from  a  process  node. 
Roles  are  adopted  either  at  creation  of  the  process  node  or  explicitly.  When  a  process  Is  created.  It 
Implicitly  adopts  the  role  represented  by  the  file  node  containing  an  executable  Image  of  the  program 
It  Is  executing.  When  a  root  process  node  Is  created,  It  Implicitly  adopts  the  role  represented  by  Its 
current  user  node.  When  any  process  node  is  created,  It  Implicitly  Inherits  the  relationships  of  the 
relation  ADOPTED_ROLE  of  the  node  of  Its  creating  process.  A  process  may  explicitly  adopt  a  role 
associated  with  a  group  using  the  ADOPT  procedure  (Section  S.I.4.4).  For  a  process  to  adopt  a  role 
associated  with  a  given  group,  a  node  representing  some  other  adopted  role  of  the  process  must  be  a 
potential  member  of  the  given  group. 
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4. 4. 2. 3.  Evaluating  acceaa  rights 

The  value  of  the  GRANT  attribute  Is  a  list  whose  syntax  Is  given  by  the  BNF  In  TABLE  II.  The 
necessary  right  Is  an  access  right,  and  the  resulting  rights  are  a  list  of  access  rights  An  access  right 
name  has  the  syntax  of  an  Ada  Identifier. 


Table  II.  GRANT  attribute  value  BNF 


grant_attrlbute_value::  =  (  [  grant _ Item  {.grant _ Item}]) 

grant_ltem:;=  ([necessary _right=>]  resultlng_rights_llst) 

necessary  _  right  ::=  Identifier 

resulting _ rights _ llst::=  Identifier  j 

(  Identifier  {,  identifier}) 


Notation: 

1.  Words  -  syntactic  categories 

2.  [  ]  -  optional  Items 

3.  {  }  -  an  Item  repeated  zero  or  more  times 

4.  |  -  separates  alternatives 


The  syntax  Is  consistent  with  that  given  in  Section  5.4.  The  Interfaces  in  Section  5.4  ran  be  used  to 
construct  and  manipulate  values  of  the  GRANT  attribute. 

Checking  of  discretionary  access  control  rights  Involves  relevant  grant  Items  and  approved  access 
rights,  both  of  which  are  derived  from  the  values  of  GRANT  attributes.  For  a  given  subject  and 
object,  relevant  grant  items  are  the  grant  Items  in  values  of  GRANT  attributes  of  relationships  of  the 
relation  ACCESS  emanating  from  the  object  and  pointing  at  any  node  representing  a  role  which  is  an 
adopted  role  of  the  process  subject  or  representing  a  group  one  of  whose  permanent  members  is  an 
adopted  role  of  the  process  subject.  Approved  access  rights  are  access  rights  whose  names  appear  in 
resulting  rights  lists  of  relevant  grant  Items  for  which  either  (1)  the  necessary  right  I-  null  or  (2)  the 
necessary  right  Is  an  approved  access  right. 

For  example,  given  a  process  node  SUBJECT,  an  object  OBJECT,  and  two  nodes  ROLEl  and  ROLE2 
representing  roles,  the  following  relationships  might  exist: 

a.  a  relationship  of  the  relation  ACCESS  from  OBJECT  to  ROI.El  with  a  GRANT  attribute 
value  of  (READMAIL— >(RKAJ>.  WRITE)). 

b.  a  relationship  of  the  relation  ACCESS  from  OBJECT  to  ROI.E2  with  a  GRANT  attribute 
value  of  (READMAIL). 
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23 


Wur>ED  M ri.->TD-  MS- 

SI  JAM  Ajn  IBM 


Kill -EXCLUSIVE 


EXCLUSIVE 


E 

X 

12  I 

S 

II  T 
R  EXIST 

0  R 

M  • 

RC 

E  VC 

X  AC 

C  RA 

L  VA 

U  AA 

s  m 

i  n 

V  AH 

E  C 

EXEC 


E 

X 

E 

1  V  1C  VC  AC  RA  VA  AA  UtVHAXCCRIKVC  AC  RA  VA  AA  KR  VR  AH  C 


X  X 
X  X  X  X  X 
X  X 
X  X  X  X  X 
X  XX 
X 
X  X 
X 
X 
X  X 
X 
X  X 
X  X 


X  XX 

X  X  X  X  X  X  X 


X 

X 


X 
X  X 
X  X 
X  X 


E 

X 

c 

L 

u 

s 

I 

V 

E 


R  X 
V  X  X 
RC  X 
VC  X  X 
AC  X 
RA  X 
VA  X  X 
AA  X 
RR  X 
VR  X  X 
AR  X 
C  X  X 


X 

X 

X 

X 

X 


X  X 


X 

X 


X  X 


X 

XXX 


X 

X  X 
X  X 
X  X 


X 
X  X 
X 

X  X 
X 
X 
X  X 
X 
X 
X  X 
X 
X  X 


X  X  XX 

xxxxxxxxx 

X 

X  X 
X  X 


X 

X 


X 

X  X 
X  X 
X  X 


X  *  Opan  vita  lntaat  12  la  bloctad  11  tin  a x*  opan  hasdlta  opanad  aitb 
lntaat  H. 


Ell at  ■  EXISTENCE  R  *  REAS 

a  R£AD_COHTEXTS  VC  «  VRITE_CONTE)fTS 

a  READATTRIBUTES  VA  *  VRITE~ ATTRIBUTES 

a  READJtELATIONSHI?S  *R  *  WRITE  ^ATTRIBUTES 

C  a  CONTROL  ExtC  a  EXECUTE 


V  a  WRITE 

AC  *  APPEMD_CONTEWTS 
AA  *  APPEND~ATTRI  BUTES 
AR  =  APPEND  RELATIONSHIPS 


Figure  2.  Matrix  of  access  synchronization  constraints 
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specified  in  FIGURE  2.  Open  and  change_ intent  operations  are  additionally 
delayed  If  there  are  open  node  handles  to  the  node  with  Intent  to  read,  write  or 
append  relationships  or  to  read,  write  or  append  access  control  Information 

EXECUTE:  Open  and  change_intent  operations  are  delayed  If  the  node  contents  are  locked 

against  read  operations.  The  established  aeeess  right  for  subsequent  oiH-rations  is 
the  permission  to  initiate  a  process  taking  the  node  contents  as  executable  image 


Open  node  handles  can  block  other  attempts  to  open  other  node  handles  or  to  change  the  Intent  or 
other  node  handles  according  to  the  rules  demonstrated  In  FIGURE  2. 
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For  EXCLUSIVE_ WRITE _ ATTRIBUTES,  the  node  Is  locked  against  opens  with 
Intent  to  read,  write  or  append  attributes  as  specified  In  FIGURE  2  Open  and 
ehange_lntent  operations  are  additionally  delayed  if  there  are  open  node  handles  to 
the  node  with  Intent  to  read,  write  or  append  attributes. 

APPEND  _  ATTRIBUTES,  EXCLUSIVE  _  APPEND  _ ATTRIBUTES: 

Open  and  change_lntent  operations  are  delayed  If  the  node  or  Its  attributes  are 
locked  against  append  operations.  The  established  access  right  for  subsequent 
op<  rations  Is  to  create  node  attributes. 

For  EXCLUSIVE _ APPEND  _ ATTRIBUTES,  the  node  is  locked  against  opens 
with  Intent  to  write  or  append  attributes  as  specified  In  FIGURE  2.  Open  and 
change_ Intent  operations  are  additionally  delayed  If  there  are  open  node  handles  to 
the  node  with  Intent  to  write  or  append  attributes. 

READ  _ RELATIONSHIPS,  EXCLUSIVE _ READ  _ RELATIONSHIPS: 

Open  and  change _ Intent  operations  are  delayed  If  the  node  or  Its  relationships  are 
locked  against  read  operations.  The  established  access  right  for  subsequent 
operations  Is  to  read  node  relationships,  including  their  attributes. 

For  EXCLUSIVE _ READ  _  RELATIONSHIPS,  the  node  is  locked  against  opens 
with  Intent  to  write  relationships  as  specified  In  FIGURE  2.  Often  and 
change_intent  operations  are  additionally  delayed  If  there  are  open  node  handles  to 
the  node  with  Intent  to  write  relationships. 

WRITE_ RELATIONSHIPS,  EXCLUSIVE_WRITE_ RELATIONSHIPS: 

Open  and  change_ Intent  operations  are  delayed  If  the  node  or  Its  relationships  are 
locked  against  write  operations.  The  established  access  right  for  subsequent 
operations  Is  to  write  or  create  node  relationships.  Including  their  attributes. 

For  EXCLUSIVE_WRITE_RELAT10NSHIPS,  the  node  is  locked  against  opens 
with  Intent  to  read,  write  or  append  relationships  as  specified  In  FIGURE  2.  Open 
and  change_lnient  operations  are  additionally  delayed  If  there  are  open  node 
handles  to  the  node  with  Intent  to  read,  or  write  append  relationships. 

APPEND _ RELATIONSHIPS,  EXCLUSIVE_ APPEND _RELAT10NSHIPS: 

Open  and  change_lntent  operations  are  delayed  If  the  node  or  Its  relationships  are 
locked  against  append  operations.  The  established  access  right  for  subsequent 
operations  Is  to  create  node  relationships.  Including  their  attributes. 

For  EXCLUSIVE_ APPEND_RELATIONSHlPS,  the  node  Is  locked  against  opens 
with  intent  to  write  or  append  relationships  as  specified  In  FIGURE  2.  Open  and 
change_lntent  operations  are  additionally  delayed  If  there  are  open  node  handles  to 
the  node  with  Intent  to  write  or  append  relationships. 

CONTROL,  EXCLUSIVE _ CONTROL: 

Open  and  change_lntent  operations  are  delayed  If  the  node  or  Its  relationships  are 
locked  against  write  or  control  operations.  The  established  access  right  for 
subsequent  operations  Is  to  read,  write  or  append  access  control  Information. 

For  EXCLUSIVE_ CONTROL,  the  node  Is  locked  against  opens  to  read,  write,  or 
append  relationships  or  to  read,  write,  or  append  access  control  Information  as 
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or  relationship?  are  locked  against  write  operations.  The  established  access  right  Tor 
subsequent  operations  is  to  write,  create  or  append  to  node  contents,  attributes  and 
relationships 

For  EXCLUSIVE_  WRITE,  the  node  Is  locked  against  opens  with  any  read,  write 
or  append  Intent  as  specified  In  FIGURE  2.  Open  and  change_ Intent  operations 
are  additionally  delayed  If  there  are  open  node  handles  to  the  node  with  read,  write 
or  append  Intent. 

READ  _ CONTENTS,  EXCLUSIVE_ READ _  CONTENTS: 

Open  and  change_intent  operations  are  delayed  If  the  node  or  Its  contents  are 
locked  against  read  operations.  The  established  access  right  for  subsequent 
operations  is  to  read  the  node  contents. 

For  EXCLUSIVE_READ_CONTENTS,  the  node  contents  are  locked  against  all 
opens  with  write  Intent  as  specified  in  FIGURE  2.  Open  and  change_lntent 
operations  are  additionally  delayed  If  there  are  open  node  handles  to  the  node  with 
Intent  to  write  Its  contents. 

WRITE  CONTENTS,  EXCLUSIVE _ WRITE  _ CONTENTS: 

Open  and  change_lntent  operations  are  delayed  If  the  node  or  Its  contents  are 
locked  against  write  operations.  The  established  access  right  for  subsequent 
operations  is  to  write  or  append  to  the  node  contents. 

For  EXCLUSTVE_  WRITE_CONTENTS,  the  node  contents  are  locked  against 
opens  with  read,  write  or  append  intent  as  specified  In  FIGURE  2.  Open  and 
change_ Intent  operations  are  additionally  delayed  If  there  are  open  node  handles  to 
the  node  with  intent  to  read,  write  or  append  to  its  contents. 

APPEND^ CONTENTS.  EXCLUSIVE  _  APPEND  _  CONTENTS: 

Open  and  change_intent  operations  are  delayed  If  the  node  or  Its  contents  are 
locked  against  append  operations.  The  established  access  right  for  subsequent 
operations  is  to  append  to  the  node  contents. 

For  EXCLUSIVE_ APPEND _CONTENTS,  the  node  contents  are  locked  against 
opens  with  append  or  write  intent  as  specified  In  FIGURE  2.  Open  and 
change_lntent  operations  are  additionally  delayed  If  there  are  open  node  handles  to 
the  node  with  Intent  to  append  or  write  to  Its  contents. 

READ _ ATTRIBUTES.  EXCLUSIVE  _  READ  _ ATTRIBUTES. 

Open  and  change_  Intent  operations  are  delayed  If  the  node  or  Its  attributes  are 
locked  against  read  operations.  The  established  access  right  for  subsequent 
operations  is  to  read  node  attributes.  | 

For  EXCLUSIVE_READ_ATTRIBUTES.  the  node  is  locked  against  opens  with 
Intent  to  write  attributes  as  specified  In  FIGURE  2.  Open  and  change_  Intent 
operations  are  additionally  delayed  If  there  are  open  node  handles  to  the  node  with 
Intent  to  write  attributes. 

WRITE_ ATTRIBUTES,  EXCLUSIVE_WR1TE_ ATTRIBUTES. 

Open  and  change_lntent  operations  are  delayed  If  the  node  or  Its  attributes  are 
locked  against  write  operations.  The  established  access  right  for  subsequent 
operations  Is  to  modify  and  create  node  attributes. 
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SECURITY_  VIOLATION  Is  raised  whenever  an  operation  is  attempted  which  violates  mandatory 
access  controls  for  'write'  operations.  SECURITY  _ VIOLATION  Is  raised  only  If  the  conditions  for 
other  exceptions  are  not  present. 


5.1.2.  Package  NODE-MANAGEMENT 

This  package  defines  the  general  primitives  for  manipulating,  copying,  renaming  and  deleting  nodes 
and  their  relationships. 

The  operations  defined  In  this  package  are  applicable  to  ail  nodes,  relationships  and  attributes  except 
where  explicitly  stated  otherwise.  These  operations  do  not  include  the  creation  of  nodes.  The  creation 
of  structural  nodes  Is  performed  by  the  CREATE_NODE  procedures  of  package 
STRUCTURAL_  NODES  (see  Section  5.1. 5),  the  creation  of  nodes  for  processes  Is  performed  by 
INVOKE_  PROCESS.  SPAWN_PROCESS  and  CREATE_  JOB  or  package 
PROCESS _  CONTROL  (see  Section  5.2.2).  and  the  creation  of  nodes  for  flies  Is  performed  by  the 
CREATE  procedures  of  the  Input  and  output  packages  (see  Section  5.3). 

Three  CAlS  Interfaces  for  manipulating  node  handles  are:  OPEN  opens  a  node  handle,  CLOSE  closes 
the  node  handle,  and  CHANGE _  INTENT  alters  the  specification  of  the  Intention  of  node  handle 
usage.  In  addition.  GET  _  PARENT.  GET_  CURRENT  _  NODE.  GET  _  NEXT, 

OPEN _FILE_  NODE  and  the  node  creation  procedures  also  open  node  handles.  These  Interfaces 
perform  access  synchronization  In  accordance  with  an  Intent  specified  by  the  parameter  INTENT. 

Operations  which  open  node  handles  or  ct<  mge  their  intent  are  central  to  general  node  administration 
since  they  manipulate  node  handles  and  most  other  Interfaces  take  node  handles  as  parameters. 
While  such  other  Interfaces  may  also  be  i  rovlded  In  overloaded  versions,  taking  pathnames  as  node 
Identification,  these  overloaded  versions  o  to  be  understood  as  including  implicit  OPEN  calls  with 
appropriate  Intent  specification  and  a  <1  fault  TIME_LIMIT  parameter.  Subsequent  uses  of  the 
phrase  'open  operation'  may  refer  to  any  <>''  the  OPEN,  GET _CURRENT_ NODE.  GET_PARENT, 
GET_NEXT  and  OPEN_FILE_NODE  operations. 

One  or  more  of  the  intents  defined  In  TAHLE  V  can  be  expressed  by  the  INTENT  parameters. 


Table  V.  Intents 

EXISTENCE:  The  established  access  right  for  subsequent  operations  Is  to  query  properties  of  the 
node  handle  and  existence  of  the  node  only.  Locks  on  the  node  have  no  delaying 
efTect. 

READ,  EXCLUSIVE  _  READ: 

Open  and  CHANGE_INTENT  operations  are  delayed  If  the  node.  Its  contents, 
attributes  or  relationships  are  locked  against  read  operations.  The  established  access 
right  for  subsequent  operations  Is  to  read  node  contents,  attributes  and 
relationships. 

For  EXCLUSrVE_  READ,  the  node  Is  locked  against  opens  with  any  write  Intent  as 
specified  In  FIGURE  2.  Open  and  change_ Intent  operations  are  additionally 
delayed  If  there  are  open  node  handles  to  the  node  with  write  Intent. 

WRITE.  EXCLUSIVE _  WRITE: 

Open  and  change_lnlent  operations  are  delayed  If  the  node.  Its  contents,  attributes 
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•ubtype  FORN_STRING  U  STRING; 

NODE_TYPE  describes  the  type  for  node  handles.  NODE_KJND  Is  the  enumeration  of  the  kinds 
of  nodes.  INTENT_ SPECIFICATION  describes  the  usage  of  node  handles  and  Is  further  explained 
In  Section  5.1.2.  INTENTION  Is  the  type  of  the  parameter  INTENT  of  CAIS  procedures  which  open 
or  change  the  Intent  of  a  node  handle,  as  further  explained  In  Section  5.1.2. 


NAME_STRING.  RELATIONSHIP  _  KEY.  RELATION  _  NAME,  and  FORM_  STRING  are 
subtypes  for  pathnames,  relationship  keys,  and  relation  names,  as  well  as  for  form  strings  (see  [LRM! 
H).  Value  of  these  string  subtypes  are  subject  to  certain  syntactic  restrictions  whose  violation  causes 
exceptions  to  be  raised. 


CURRENTUSER 
CURRENTNQDE 
CURREWTPROCESS  : 
LATEST JCEY 
DEFAULTRELATION : 
NO  DELAY 


constant  kakestrixg  ;= 

constant  mane_string  := 

constant  kamestring  := 

constant  relationship_key:= 
constant  relation_nais  :  = 

constant  DURATION  :  = 


• •CURRENT_USER* ; 

•  ’  CURRENT_N(JDE  *  ; 

•  ■  •  • 

•S*; 

■DOT"; 

DURATION 'FIRST 


CURRENT _ USER.  CURRENT_NODE,  and  CURRENT _ PROCESS  are  standard  pathnames  for 
the  current  user's  top-level  node,  current  node,  and  current  process,  respectively.  LATEST_KEY 
and  DEFAULT _ RELATION  are  standard  names  for  the  latest  key  and  the  default  relation  name, 
respectively.  NO_ DELAY  Is  a  constant  of  type  DURATION  (see  |LRM]  B.6)  used  for  time  limits. 


HANEERROR 
USEERROR 
STATUSERROR 
LOCK  ERROR 
I  NTENT_VI  OLATI  ON 
ACCESSVIOLATION 
SECURITY  VIOLATION 


exception; 
exception: 
exception: 
exception . 
exception ; 
exception; 
exception ; 


NAME __ ERROR  Is  raised  whenever  an  attempt  Is  made  to  access  a  node  via  a  pathname  or  node 
handle  while  the  node  does  not  exist.  It  Is  unobtainable,  discretionary  access  control  constraints  for 
knowledge  of  existence  of  a  node  are  violated,  or  mandatory  access  controls  for  'read'  operations  are 
violated.  This  exception  takes  precedence  over  ACCESS_V10LATION  and 
SECIIRITY_  VIOLATION  exceptions. 

USE_ERROR  is  raised  whenever  a  restriction  on  the  use  of  an  Interface  Is  violated 

STATUS_ ERROR  Is  raised  whenever  the  open  status  of  a  node  handle  does  not  conform  to 
expectations. 

LOCK  _ ERROR  Is  raised  whenever  an  attempt  Is  made  to  modlTy  or  lock  a  locked  node. 

INTENT_VI0LAT10N  Is  raised  whenever  an  operation  Is  attempted  on  an  open  node  handle  which 
Is  In  violation  of  the  intent  associated  with  the  open  node  handle. 

ACCESS_VIOLATION  Is  raised  whenever  an  operation  Is  attempted  which  violates  access  right 
constraints  other  than  knowledge  of  existence  of  the  node.  ACCESS_Y10LATI0N  Is  raised  only  if 
the  conditions  for  NAME  ERROR  are  not  present. 
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5.  DETAILED  REQUIREMENTS 

The  following  detailed  requirements  shall  be  fulfilled  In  a  manner  consistent  with  the  model 
descriptions  given  In  Section  4  of  this  standard. 


5.1.  General  node  management 

This  section  describes  the  CAiS  Interfaces  for  the  general  manipulation  of  nodes,  relationships  and 
attributes.  These  Interfaces  are  defined  In  five  CAiS  packages:  NODE_DEFINlTIONS  defines  types, 
subtypes,  exceptions,  and  constants  used  throughout  the  CAIS;  NODE_MANAGEMENT  defines 
Interfaces  for  general  operations  on  nodes  and  relationships;  ATTRIBUTES  defines  Interfaces  for 
general  operations  on  attributes;  ACCESS _ CONTROL  defines  interfaces  for  setting  and  adopting 
access  rights;  and  STRUCTURAL _  NODES  defines  Interfaces  for  the  creation  of  structural  nodes. 

Specialised  Interfaces  for  the  manipulation  of  process  and  file  nodes  and  or  their  relationships  and 
attributes  are  defined  in  Sections  5.2  and  5.3,  respectively. 

To  simplify  manipulation  by  Ada  programs,  an  Ada  type  NODE_TYPE  is  defined  for  values  that 
represent  an  internal  handle  for  a  node  (referred  to  as  a  node  handle.  Objects  of  this  type  can  be 
associated  with  a  node  by  means  of  CAIS  procedures,  causing  an  open  node  handle  to  be  assigned  to 
the  object.  While  such  an  association  Is  In  effect,  the  node  handle  Is  said  to  be  open;  otherwise,  the 
node  handle  Is  said  to  be  closed.  Most  procedures  expect  either  a  parameter  of  type  NODE_TYPE, 
a  pathname,  or  a  combination  of  a  base  node  (specified  by  a  parameter  BASE  of  type  NODE_TYPE) 
and  a  path  element  relative  to  It,  to  Identify  a  node. 

An  open  node  handle  Is  guaranteed  always  to  refer  to  the  same  node,  regardless  of  any  changes  to 
relationships  that  could  cause  pathnames  to  become  Invalid  or  to  refer  to  dirTerent  nodes.  This 
behavior  Is  referred  to  as  the  tracking  of  nodes  by  open  node  handles. 


5.1.1.  Package  NODE— DEFINITIONS 

This  package  defines  the  Ada  type  NODE_TYPE.  It  also  defines  certain  enumeration  and  string 
types  and  exceptions  useful  for  node  manipulations. 

type  wide  type  is  limited  private; 

type  NODEJCIMD  is  (FILE.  STRUCTURAL.  PROCESS); 

type  IlfTEJfT  SPECIFICATION  is 

(EXISTENCE,  READ.  WRITE,  READ_ATTRIBUTES,  WRITE_ATTRIBUTES . 

APPEND_ATTRI BUTES ,  READ  RELATIONSHIPS ,  WRITERELATIONSHIPS. 

appemd'relationships,  read_contents.  write'contents. 

append”cowtekts .  control,  execute,  exclusive_read. 

EXCLUSIVE  WRITE,  EXCLUSIVE_READ_ATTRIBUrES. 

EXCLUSrVE~WRITE  ATTRIBUTES , _EXCLUSIVE_APPEND_ATTRIBUTES , 

exclusive”read_relationships.  exclusive_writ£_relationships. 

EXCLUSrVE_APPEND_RELATIONSHIPS,  EXCLUSIVE_READ  CONTENTS, 

EXCLUSrVE_WRITE_COWTENTS.  EXCLUSIVE  JtPPEXD_COXTE  NTS , 

EX CL US rVE_CONTROL) ; 

type  intention  is  array  (positive  range  <>)  of  intentspecification; 

subtype  name  string  is  string; 

subtype  relationshipjcet  is  string; 

subtype  relation_name  is  string; 
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4.5.2.  Pragmatica  for  SEQUENTIAL  IQ 

A  CAJS  Implementation  must  support  generic  Instantiation  of  this  package  with  any  (non-llmlted ) 
constrained  Ada  type  whose  maximum  size  In  bits  (as  denned  by  the  attribute 
ELEMENT _TYPE'SIZE)  Is  at  least  2**15-1.  A  conforming  Implementation  must  also  support 
Instantiation  with  unconstrained  record  types  which  have  default  constraints  and  a  maximum  size  in 
bits  of  at  least  2**15-1.  It  may  (but  need  not)  use  variable  length  elements  to  conserve  space  in  th< 
external  file. 


4.5.3.  Pragmatics  for  DIRECT  IQ 

Each  element  of  a  direct-access  file  Is  selected  by  an  Integer  Index  of  type  COUNT.  A  conforming 
implementation  must  at  least  support  a  range  of  indices  from  one  to  2**  15-1. 

A  CAJS  implementation  must  support  generic  instantiation  of  this  package  with  any  (non-limited) 
constrained  Ada  type  whose  maximum  size  In  bits  (as  defined  by  the  attribute 
ELEMENT_TYPE’SIZE)  Is  at  least  2**  15-1.  A  conforming  implementation  must  also  support 
Instantiation  with  unconstrained  record  types  which  have  default  constraints  and  a  maximum  size  in 
bits  of  at  least  2**15-l.  It  may  (but  need  not)  use  variable  length  elements  to  conserve  space  In  the 
external  file. 


4-5.4.  Pragmatics  for  TEXT  IQ 


A  CAJS  implementation  must  support  files  with  at  least  2**15-1  records/lines  In  total  and  at  least 
2**15-1  lines  per  page.  A  CAJS  Implementation  must  support  at  least  255  columns  per  line. 
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assigned  to  the  file  node.  The  attribute  LOWEST _ CLASSIFICATION  defines  the  lowest  allowable 
object  classification  label  that  may  be  assigned  to  the  file  node. 

When  a  file  node  representing  the  device  Is  opened,  the  device  Inherits  Its  security  classification  label 
from  the  first  process  performing  the  open  operation.  If  It  is  not  possible  to  label  the  node 
representing  the  device  within  the  bounds  of  the  attributes  HIGHEST_CLASSIFICATION  and 
LOWEST  _  CLASSIFICATION,  the  operation  falls  by  raising  the  exception 
SECURITY  _  VIOLATION. 

4.4.3.S.  Mandatory  access  checking 

When  access  control  Is  enforced  for  a  given  operation,  mandatory  access  control  rules  are  checked  If 
mandatory  access  controls  are  not  satisfied,  the  operation  terminates  by  raising  the  exception 
SECURITY _ VIOLATION,  except  where  the  Indication  of  failure  constitutes  violation  of  mandatory 
access  control  rules  for  "read*  operations.  In  which  case  NAME_ERROR  may  be  raised. 


4.5.  Pragmatics 

This  section  provides  several  minimum  values  for  Implementation-determined  quantities  and  sizes. 


4.5.1.  Pragmatics  for  CAIS  node  model 

Several  private  types  are  defined  as  part  of  the  CAIS  node  model.  The  actual  implementation  of 
these  types  may  vary  from  one  CAIS  Implementation  to  the  next.  However,  it  is  Important  to 
establish  certain  minimum  values  for  each  type  to  enhance  portability. 

NAME  _  STRING 

At  least  255  characters  must  be  supported  in  a  CAIS  pathname. 

RELATIONSHIP  _  KEY 

At  least  80  leading  characters  must  be  significant  In  a  relationship  key. 

ATTRIBUTE _  NAME.  RELATION_NAME 

At  least  80  leading  characters  must  be  significant  in  attribute  and  relation  names. 

Tree  height  At  least  10  levels  or  hierarchy  must  be  supported  for  the  primary  relationships. 

Record  size  number 

At  least  2**15-I  bits  per  record  must  be  supported. 

Open  node  count 

Each  process  must  be  able  to  have  at  least  127  nodes  open  simultaneously. 

List  At  least  2**15- 1  bits  per  list  must  be  supported. 


29 


Table  IV.  Classification  attribute  value  BNF 


object _ classification  ::=  classification 
subject _ classification  ::=  classification 
classification  ::=  (  hierarchical  classification, 
non_hlerarchical_catej>oiiea  ) 
hierarchical _ classification  ::=  keyword 

non_hlerarch)cal_categorles  ::=  {  (  keyword  {  .  keyword  }  ]  ) 
keyword  Identifier 


Notation: 

1.  Words  -  syntactic  categories 

2.  [  ]  -  optional  Items 

3.  {  }  -  an  Item  repeated  jero  or  more  times 

|  -  separates  alternatives 


4.4.S.2.  Labeling  of  process  nodes 

When  a  root  process  Is  created.  It  Is  assigned  subject  and  object  classification  labels.  The  method  by 
which  these  Initial  labels  are  assigned  Is  not  specified;  however,  the  labels  shall  accurately  represent 
security  levels  of  the  specific  fusers /  with  which  they  are  associated  [TCSEC].  When  any  non-root 
(dependent)  process  node  Is  created,  the  creator  may  specify  the  classification  attributes  associated 
with  the  node.  If  no  classification  Is  specified,  the  classification  Is  Inherited  from  the  creamr.  The 
assigned  classification  must  adhere  to  the  requirements  for  mandatory  access  control  over  write 
operations. 

4.4.3.3-  Labeling  of  non-process  nodca 

When  a  non-process  object  Is  created,  It  Is  assigned  an  object  classification  label.  The  classification 
label  may  be  specified  In  the  create  operation,  or  It  may  be  inherited  from  the  parent.  The  assigned 
classification  must  adhere  to  the  requirements  for  mandatory  access  control  over  write  operations. 

4.4.3.4.  Labeling  of  nodes  for  devices 

Certain  flic  nodes  representing  devices  may  have  a  range  of  classification  levels.  The  classification 
label  of  the  node  of  the  first  process  opening  a  handle  to  one  of  these  nodes  Is  assigned  to  the  nic  node 
while  there  are  any  open  node  handles  to  the  file  node.  Only  when  all  open  node  handles  have  been 
closed  can  a  new  classification  label  be  assigned  to  the  file  node. 

The  range  of  classification  levels  Is  specified  by  two  predefined  CAJS  node  attributes.  The  attribute 
HlG)IEST_CLASSIFICATION  defines  the  highest  allowable  object  classification  label  that  may  be 
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Each  subject  and  object  Is  assigned  *ero  or  more  Don-hlerarchlcaJ  categories  which  represent 
coexisting  classifications.  A  subject  may  obtain  read  access  to  an  object  IF  the  set  of  non-hierarchical 
categories  assigned  to  the  subject  contains  each  category  assigned  to  the  object.  Likewise,  a  subject 
may  obtain  write  access  to  an  object  If  each  of  the  non-hlerarchlcal  categories  assigned  to  the  subject 
are  included  in  the  set  of  categories  assigned  to  the  object. 

A  subject  must  satisfy  both  hierarchical  and  non-hlerarchlcal  access  rights  rules  to  obtain  access  to  an 
object. 

In  the  CAJS,  subjects  are  CAJS  processes,  while  an  object  may  be  any  CAIS  node.  Operations  are 
CAJS  operations  and  are  classified  as  read,  write,  or  read/write  operations.  Access  checking  Is 
performed  at  the  time  the  operation  Is  requested  by  comparing  the  classification  of  the  subject  with 
that  of  the  object  with  respect  to  the  type  of  operation. 

4.4.3.I.  Labeling  of  CAIS  nodes 

The  labeling  of  nodes  Is  provided  by  predefined  node  attributes.  A  predefined  attribute,  called 
SUBJECT_CLASSIFICATION,  Is  assigned  to  each  process  node  and  represents  the  process' 
classification  as  a  subject.  A  predefined  attribute,  called  OBJECT_ CLASSIFICATION,  Is  assigned  to 
each  node  and  represents  the  node's  classification  as  an  object.  These  attributes  have  a  limited 
function  and  cannot  be  read  or  written  directly  through  the  CAJS  Interfaces.  The  value  of  the 
attribute  is  a  parenthesized  list  containing  two  Items,  the  hierarchical  classification  level  and  the  non- 
hlerarchlcal  category  list.  The  hierarchical  classification  Is  a  keyword  member  of  the  ordered  set  of 
hierarchical  classification  keywords.  The  non-hlerarchlcal  category  list  Is  a  list  of  zero  or  more 
keyword  members  of  the  set  of  non-hlerarchlcal  categories.  The  hierarchical  classification  level  set  and 
the  non-hierarchical  category  set  are  Implementation-defined.  For  example,  the  following  are  possible 
classification  attribute  values: 

(TOP_  SECRET.  (MAIL _  USER.  OPERATOR.  STAFF)) 

(UNCLASSIFIED,  ()) 

(SECRET.  (STAFF)) 


The  BNF  for  the  value  of  a  classification  attribute  (and  of  the  LEVEL  parameter  which  provides  it  at 
node  creation)  is  given  In  Table  IV. 
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READ  This  Is  the  union  of  READ  _  RELATIONSHIPS,  READ  _  ATTRIBUTES, 

READ_ CONTENTS  And  EXISTENCE  access  rights.  This  access  right  Is  necessary 
to  open  the  object  with  Intent  READ.  It  Is  sufficient  to  open  the  object  with  intent 
READ_RELATIONSHIPS,  READ_  ATTRIBUTES  or  READ _ CONTENTS 

WRITE  This  Is  the  union  of  WRITE_RELATIONSH!PS,  WRITE_  ATTRIBUTES. 

WR!TE_ CONTENTS  and  EXISTENCE  access  rights.  This  access  right  Is 
necessary  to  open  the  object  with  Intent  WRITE.  It  Is  sufficient  to  open  the  object 
with  Intent  WRITE_  RELATIONSHIPS,  WRITE_  ATTRIBUTES  or 
WRITE  CONTENTS. 


APPEND  This  Is  the  union  of  APPEND _  RELATIONSHIPS,  APPEND _ ATTRIBUTES, 
APPEND _ CONTENTS  and  EXISTENCE  access  rights.  This  access  right  Is 
necessary  to  open  the  object  with  Intent  APPEND.  It  Is  sufficient  to  open  the 
object  with  Intent  APPEND  _  RELATIONSHIPS,  APPEND  _  ATTRIBUTES  or 
APPE'  D  CONTENTS.  I 


EXECUTE  The  subject  may  create  a  process  that  takes  the  content'  or  the  object  as  Its 
executable  Image;  the  access  right  EXISTENCE  Is  Implicitly  granted.  This  access 
right  Is  necessary  to  open  the  object  with  Intent  EXECUTE. 


CONTROL  The  subject  may  modify  access  control  Information  of  the  object;  the  access  right 
EXISTENCE  is  Implicitly  granted.  This  access  right  is  necessary  to  open  the  object 
with  Intent  CONTROL. 


4.4.2.4.  Discretionary  accents  checking 

CAIS  access  control  rules  state  that  any  access  right  required  for  a  subject  to  access  an  object  must 
be  contained  In  the  set  of  approved  access  rights  of  that  object  with  respect  to  that  subject.  The 
CAIS  model  allows  discretionary  access  checking  to  be  performed  at  the  time  a  node  handle  Is  opened. 
At  this  point  access  rights  Implied  by  the  INTENT  parameter  of  the  open  operation  must  be  a  subset 
of  the  approved  access  rights.  If  this  Is  not  the  case,  the  operation  Is  terminated  and  an  exception  is 
raised.  For  subsequent  access  using  the  node  handle,  the  access  rights  required  may  be  compared  to 
the  rights  Implied  by  the  Intent,  rather  than  the  approved  access  rights. 


4.4.3.  Mandatory  access  control 

Mandatory  access  control  provides  access  controls  based  directly  on  a  comparison  of  the 
Individual’s  clearance  or  authorization  for  the  Information  and  the  classification  or  sensitivity 
designation  of  the  Information  being  sought  [TCSECJ. 

A  mandatory  access  control  classification  may  be  either  a  hierarchical  classification  level  or  a  non- 
hlerarchlcal  category.  A  hierarchical  classification  level  Is  chosen  from  an  ordered  set  of  classification 
levels  and  represents  either  the  sensitivity  of  the  object  or  the  trustworthiness  of  the  subject.  In 
hierarchical  classification,  the  reading  of  Information  flows  downward  towards  less  sensitive  areas, 
while  the  creating  of  Information  flows  upward  towards  more  trustworthy  Individuals.  A  subject  may 
obtain  read  access  to  an  object  If  the  hierarchical  classification  of  the  subject  Is  greater  than  or  equal 
to  that  of  the  object.  In  turn,  to  obtain  write  access  to  the  object,  a  subject's  hierarchical 
classification  must  be  less  than  or  equal  to  the  hierarchical  classification  of  the  object. 
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Table  HI.  Predenned  access  rights 

EXISTENCE  The  minimum  access  rights  without  which  the  object  Is  Inaccessible  to  the  subject. 

Without  additional  access  rights  the  subject  may  neither  read  nor  write  attributes, 
relationships  or  contents  of  the  object. 

READ  _RELATIONSHIPS 

The  subject  may  read  attributes  of  relationships  emanating  from  the  object  or  use 
It  for  traversal  to  another  node;  the  access  right  EXISTENCE  Is  Implicitly  granted. 
This  access  right  Is  necessary  to  open  the  object  with  intent 
READ  _  RELATIONSHIPS. 

WRITE_RELATIONSHIPS 

The  subject  may  create  or  delete  relationships  emanating  from  the  object  or  may 
create,  delete,  or  modify  attributes  of  these  relationships;  the  access  right 
EXISTENCE  Is  Implicitly  granted.  This  access  right  Is  necessary  to  open  the  object 
with  Intent  WRITE _ RELATIONSHIPS. 

APPEND  _  RELATIONSHIPS 

The  subject  may  create  relationships  emanating  from  the  object  and  attributes  of 
these  relationships;  the  access  right  EXISTENCE  Is  Implicitly  granted.  This  access 
right  Is  necessary  to  open  the  object  with  Intent  APPEND_RELATIONSHIPS. 

READ  _  ATTRIBUTES 

The  subject  may  read  attributes  of  the  object;  the  access  right  EXISTENCE  is 
Implicitly  granted.  This  access  right  Is  necessary  to  open  the  object  with  Intent 
READ  _  ATTRIBUTES . 

WRITE  _  ATTRIBUTES 

The  subject  may  create,  write,  or  delete  attributes  of  the  object;  the  access  right 
EXISTENCE  is  implicitly  granted.  This  access  right  Is  necessary  to  open  the  object 
with  Intent  WRITE _ ATTRIBUTES. 

APPEND  _  ATTRIBUTES 

The  subject  may  create  attributes  of  the  object;  the  access  right  EXISTENCE  Is 
Implicitly  granted.  This  access  right  Is  necessary  to  open  the  object  with  Intent 
APPEND  _  ATTRIBUTES. 

READ  _  CONTENTS 

The  subject  may  read  contents  of  the  object;  the  access  right  EXISTENCE  is 
Implicitly  granted.  This  access  right  Is  necessary  to  open  the  object  with  Intent 
READ_  CONTENTS. 

WRITE  _  CONTENTS 

The  subject  may  write  contents  of  the  object;  the  access  right  EXISTENCE  Is 
Implicitly  granted.  This  access  right  Is  necessary  to  open  the  object  with  Intent 
WRITE_CONTENTS  granted.  This  access  right  Is  necessary  to  open  the  object 
with  Intent  READ _ CONTENTS. 

APPEND  _  CONTENTS 

The  subject  may  append  contents  of  the  object;  the  access  right  EXISTENCE  Is 
Implicitly  granted.  This  access  right  Is  necessary  to  open  the  object  with  Intent 
APPEND  CONTENTS. 
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c.  a  relationship  of  the  relation  ADOPTED_ROI.E  from  SUBJECT  to  ROI.El.  and 

d.  a  relationship  of  the  relation  ADOPTED  _  ROLE  from  SUBJECT  to  ROLE2. 

The  relevant  (rant  items  are  READMAIL  and  READ \1AIL=> (READ,  WRITE).  The  approved 
access  rights  for  SUBJECT  to  access  OBJECT  are  (1)  READMAIL  because  the  neci'ssary  rights  of  the 
relevant  grant  Iteni  of  the  access  relationship  to  ROLE2  Is  null  and  (2)  READ  and  WRITE  because 
the  necessary  right,  READMAIL,  of  the  relevant  grant  Item  of  the  access  relationship  to  ROLEl  is 

approved.  FIGURE  I  shows  a  graphic  representation  of  these  relationships. 


r 


Figure  1.  Access  relationships 

Access  rights  may  be  user-defined,  but  certain  access  rights  havp  special  significance  ir>  CAIS 
operations.  In  particular,  the  CAIS  recognizes  the  access  rights  given  In  Table  III  and  the  kinds  of 
access  for  which  they  are  necessary  or  sufficient. 
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5. 1.2.1.  Opening  a  node  handle 


KNODE: 

\ 

in  NODE  TYPE; 

RARE: 

In 

HARE  STRING; 

INTENT: 

in 

INTENTION  := 

(1  =  >  REAS); 

TIME_LIMIT 

:  In 

DURATION  :*  NO_DELAY); 

ICRODE: 

in  out  RODE  TYPE; 

BASE: 

in 

RODE  TYPE; 

KEY: 

In 

RELATIONSHIP  KEY; 

RELATION : 

In 

RELATION  HARE : * 

DEFAULT  RELATION; 

INTENT: 

In 

INTENTION  :=  (1  =>  REAS) 

TIRE  LIMIT : 

in 

DURATION  : =  NO  DELAY) ; 

Purpose: 

These  procedures  return  an  open  node  handle  In  NODE  to  the  node  Identified  by  the  pathname 
NAME  or  BASE/KEY/RELATION,  respectively.  The  INTENT  parameter  determines  the  access 
rights  available  for  subsequent  uses  of  the  node  handle;  It  also  establishes  access  synchronization 
with  other  users  of  the  node.  The  TIME _ LIMIT  parameter  allows  the  specification  of  a  time 
limit  for  the  delay  Imposed  on  OPEN  by  the  existence  of  locks  on  the  node.  A  delayed  OPEN 
call  completes  after  the  node  Is  unlocked  or  the  specified  time  limit  has  elapsed.  In  the  latter 
case,  the  exception  LOCK  _ ERROR  Is  raised. 


Parameters: 


NODE 

NAME 

BASE 

KEY 

RELATION 

INTENT 


Is  a  node  handle,  initially  closed,  to  be  opened  to  the  Identified  node. 

is  the  pathname  Identifying  the  node  to  be  opened. 

la  an  open  node  handle  to  a  base  node  for  node  Identification. 

Is  the  relationship  key  Tor  node  Identification, 
is  the  relation  name  for  node  Identification. 

Is  the  Intent  of  subsequent  operations  on  the  node;  the  actual  parameter  takes  the 
form  of  an  array  aggregate. 


TIME_LIMIT  Is  a  value  of  type  DURATION,  specifying  a  time  limit  for  the  delay  on  waiting  for 
the  unlocking  of  a  node  In  accordance  with  the  desired  INTENT. 


Exceptions: 

NAME_  ERROR 

Is  raised  If  the  pathname  specified  by  NAME  Is  syntacth  lly  Illegal  or  If  any 
traversed  node  In  the  path  specified  by  name  Is  unobtainable.  Inaccessible  or  non¬ 
existent  or  If  the  relationship  specified  by  RELATION  and  KEY  or  by  the  last  path 
element  of  NAME  does  not  exist.  NAME_ ERROR  Is  also  raised  If  the  node  to 
which  a  handle  Is  to  be  opened  Is  Inaccessible  or  unobtainable  and  the  given 
INTENT  Includes  any  Intent  other  than  EXISTENCE. 

USE_ERROR  is  raised  If  the  specified  INTENT  Is  an  empty  array. 
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STATUS _ ERROR 

is  raised  If  the  node  handle  NODE  Is  already  open  prior  to  the  call  on  OPEN  or  ir 
BASE  is  not  an  open  node  handle. 

LOCK  _  ERROR 

is  raised  If  the  OPEN  operation  Is  delayed  beyond  the  specified  time  limit  due  to 
the  existence  of  locks  In  conflict  with  the  specified  INTENT  This  includes  any 
delays  caused  by  locks  on  nodes  traversed  on  the  path  specified  by  the  pathname 
NAME  or  locks  on  the  node  identified  by  BASE,  preventing  the  reading  of 
relationships  emanating  from  these  nodes. 

INTENT_  VIOLATION 

Is  raised  If  BASE  was  not  opened  with  an  Intent  establishing  the  right  to  read 
relationships. 

ACCESS_  VIOLATION' 

Is  raised  If  the  current  process'  discretionary  access  control  rights  are  Insufficient  to 
traverse  the  path  specified  by  NAME  by  BASE,  KEY  and  RELATION  or  to  obtain 
access  to  the  node  consistent  with  the  specified  INTENT.  ACCESS_  VIOLATION 
Is  raised  only  If  the  conditions  for  NAME_ERROR  are  not  present. 

SECURITY_  VIOLATION 

is  raised  if  the  attempt  to  obtain  access  to  the  node  with  the  specified  INTENT 
represents  a  violation  of  mandatory  access  controls  for  the  CA1S. 
SECURITY_ VIOLATION  Is  raised  only  If  the  conditions  for  other  exceptions  are 
not  present. 


Notes. 

An  open  node  handle  acts  as  If  the  handle  forms  an  unnamed  temporary  secondary  relationship 
to  the  node;  this  means  that.  If  the  node  Identified  by  the  open  node  handle  is  renamed 
(potentially  by  another  process),  the  open  node  handle  tracks  the  renamed  node. 

It  is  possible  to  open  a  node  handle  to  an  unobtainable  node  or  to  an  Inaccessible  node.  The 
latter  Is  consistent  with  the  fact  that  the  existence  of  a  relationship  emanating  from  an 
accessible  node  to  which  the  user  has  READ_ RELATIONSHIPS  rights  cannot  be  hidden  from 
the  user. 

6. 1.2.2.  Cloaing  a  node  handle 

procedure  close  (node:  in  out  nodetype); 


Purpose: 

This  procedure  severs  any  association  between  the  node  handle  NODE  and  the  node  and  releases 
any  associated  lock  on  the  node  Imposed  by  the  Intent  of  the  node  handle  NODE.  Closing  an 
already  closed  node  handle  has  no  effect. 

Parameter: 

NODE  Is  a  node  handle.  Initially  open,  to  be  closed. 


Exceptions: 
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none 


Notes: 

A  NODE_TYPE  variable  must  be  closed  before  another  OPEN  can  be  called  using  the  same 
NODE_TYPE  variable  as  an  actual  parameter  to  the  formal  NODE  parameter  of  OPEN. 


S.l.2.3.  Changing  the  intention  regarding  node  handle  usage 

procedure  CHANCE.nrTQrTOraDE:  In  out  mde_type; 

iifTBfT:  in  nrrornoK; 

TIMELIMIT:  In  DURATION :  = 

NO  DEUT); 


Purpose: 

This  procedure  changes  the  Intention  regarding  use  of  the  node  handle  NODE.  It  is  semantically 
equivalent  to  closing  the  node  handle  and  reopening  the  node  handle  to  the  same  node  with  the 
INTENT  and  TIME.LIMIT  parameter*  of  CHANGE_  INTENT.  except  that 
CHANGE_ INTENT  guarantees  to  return  an  o|*'ii  node  handle  that  refers  to  the  same  node  as 
the  node  handle  input  in  NODE  (see  the  Issue  explained  In  the  note  below). 

Parameter: 

NODE  Is  an  open  node  handle 

INTENT  Is  the  Intent  of  subsequent  operations  on  the  node;  the  actual  parameter  takes  the 

form  of  an  array  aggregate. 

TIME_LIMIT  is  a  value  of  type  DURATION,  specifying  a  time  limit  for  the  delay  on  waiting  for 
the  unlocking  of  a  node  In  accordance  *  ith  the  desired  INTENT. 


Exceptions: 

NAME  _  ERROR 

Is  raised  If  the  node  handle  NODE  refers  to  an  unobtainable  node  and  INTENT 
contains  any  Intent  specification  other  than  EXISTENCE. 

STATUS _ ERROR 

Is  raised  if  the  node  handle  NODE  is  riot  an  open  node  handle. 

LOCK  _  ERROR 

Is  raised  If  the  operation  Is  delayed  beyond  the  specified  time  limit  due  to  the 
existence  of  locks  on  the  node  In  conflict  with  the  specified  INTENT. 

ACCESS  .VIOLATION 

Is  raised  If  the  current  process'  discretionary  access  control  rights  are  Insufficient  to 
obtain  access  to  the  node  consistent  with  the  specified  INTENT. 
ACCESS  .VIOLATION  Is  raised  only  If  the  condition  for  NAME.ERROR  Is  not 
present. 

SECURITY  .VIOLATION 

is  raised  If  the  attempt  to  obtain  access  consistent  with  the  Intention  INTENT  to 
the  node  specified  by  NODE  represents  a  violation  of  mandatory  access  controls  for 
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the  CAIS  SECURITY  _  VIOLATION  Is  raised  only  If  the  conditions  for  other 
exceptions  are  not  present. 


Notes: 

Use  of  the  sequence  of  a  CLOSE  and  an  OPEN  operation  Instead  of  a  CHANGE_  INTENT 
operation  cannot  guarantee  that  the  same  node  Is  opened,  since  relationships,  and  therefore  the 
node  Identification,  may  have  changed  since  the  previous  OPEN  on  the  node. 

5.I.2.4.  Examining  the  open  ■tatua  of  a  node  handle 

function  ISJJPEMOTODE:  in  NQDEJTrPE) 
return  boolean. 


Purpose: 

This  function  returns  TRUE  If  the  node  handle  NODE  Is  open;  otherwise.  It  returns  FALSE. 
Parameter: 

NODE  is  a  node  handle. 


Exceptions: 

None. 


5. 1.2. 5.  Querying  the  intention  of  a  node  handle 

function  INTENTOF  (NODE :  in  NODETTPE) 
return  intention; 


Purpose: 

This  function  returns  the  intent  with  which  the  node  handle  NODE  is  open. 
Parameter: 

NODE  is  an  open  node  handle. 


Exception: 

STATUS _ ERROR 

Is  raised  If  the  node  handle  NODE  Is  not  open. 

6.I.2.O.  Querying  the  kind  of  a  node 

function  KIND  (NODE:  in  NODEJTYPE) 

return  node  kind;- 


Purpose: 

This  function  returns  the  kind  of  a  node,  either  FILE.  PROCESS  or  STRUCTURAL. 
Parameter: 

NODE  Is  an  open  node  handle. 
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Exceptions: 

STATUS _ ERROR 

Is  raised  If  the  node  handle  NODE  Is  not  open. 

5.1. 2. 7.  Obtaining  the  unique  primary  pathname 

function  primaryiiame  (rode  :  in  rode_type) 
return  HAKE  STRING: 


Purpose. 

This  function  returns  the  unique  primary  name  of  the  node  identified  by  NODE. 
Parameter: 

NODE  Is  an  open  node  handle  identifying  the  node. 


Exceptions: 

NAME_  ERROR 

Is  raised  If  any  node  traversed  on  the  primary  path  to  the  node  is  Inaccessible. 
STATUS _ ERROR 

Is  raised  If  the  node  handle  NODE  Is  not  open. 

LOCK  ERROR 

Is  raised  If  access  consistent  with  Intent  READ_  RELATIONSHIPS  to  any  node 
traversed  on  the  primary  path  cannot  be  obtained  due  to  an  existing  lock  on  the 
node. 

INTENT  VIOLATION 

is  raised  if  NODE  was  not  opened  with  an  intent  establishing  the  right  to  read 
relationships. 

ACCESS  _  VIOLATION 

is  raised  If  the  current  process’  discretionary  access  control  rights  are  Insufficient  to 
traverse  the  node's  primary  path.  ACCESS _ VIOLATION  Is  raised  only  If  the 
conditions  for  NAME_  ERROR  are  not  present. 

5.I.2.8.  Obtaining  the  relationship  key  of  a  primary  relationship 

function  prinary_key(node:  In  node_type) 
return-R£LATlONSH!P  KEY: 


Purpose: 

This  function  returns  the  relationship  key  of  the  last  path  element  of  the  unique  primary 
pathname  of  the  node. 

Parameter: 

NODE  Is  an  open  node  handle  Identifying  the  node. 


Exceptions: 
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NAME_  ERROR 

Is  raised  If  the  parent  node  of  the  node  Identified  by  NODE  is  Inaccessible 
STATUS_ ERROR 

Is  raised  If  the  node  handle  NODE  is  not  open. 

LOCK  _  ERROR 

is  raised  If  the  parent  node  Is  locked  against  reading  relationships. 

INTENT  _  VIOLATION 

Is  raised  If  the  node  handle  NODE  was  not  opened  with  an  Intent  establishing  the 
light  to  read  relationships. 

ACCESS  _  VIOLATION 

Is  raised  If  the  current  process'  discretionary  access  control  rights  are  insufficient  to 
obtain  access  to  the  node's  parent  consistent  with  Intent  READ_REI.ATIONSIIII\ 
ACCESS _ VIOLATION  Is  raised  only  ir  the  conditions  for  NAME _  ERROR  are 
not  present. 

S.l.2.0.  Obtaining  the  relation  name  of  a  primary  relationship 

function  PRIRARTREl-ATIOII  (MODE  in  UODE  TTPE) 
return  RELATION  NAME; 


Purpose: 

This  function  returns  the  relation  name  of  the  last  path  element  of  the  unique  primary 
pathname  of  the  node. 

Parameter: 

NODE  Is  an  open  node  handle  Identifying  the  node. 

Exceptions: 

NAME _ ERROR 

la  raised  If  the  parent  node  of  the  node  Identified  by  NODE  Is  Inaccessible. 
STATUS_ ERROR 

Is  raised  If  the  node  handle  NODE  is  not  open. 

LOCK  _  ERROR 

is  raised  if  the  parent  node  is  locked  against  reading  relationships. 

INTENT_  VIOLATION 

Is  raised  If  NODE  was  not  opened  with  an  Intent  establishing  the  right  to  read 
relationships. 

ACCESS  _  VIOLATION 

Is  raised  If  the  current  process'  discretionary  access  control  rights  are  Insufficient  to 
obtain  access  to  the  node's  parent  consistent  with  Intent  to 
READ _  RELATIONSHIPS.  ACCESS _  VIOLATION  Is  raised  only  ir  the  conditions 
for  NAME_  ERROR  are  not  present. 
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5.1.2.10.  Obtaining  the  relationship  key  of  t  e  last  relationship  traversed 

function  path_key  (node  :  in  node_type) 
return  relationship  key; 


Purpose: 

This  function  returns  the  relationship  key  of  the  r<  tatlonshlp  corresponding  to  the  Iasi  path 
element  of  the  pathname  used  In  opening  this  node  I  indie.  Since  a  path  element  is  a  string,  the 
relationship  key  Is  returned  even  if  the  relationship  h  s  been  deleted. 

Parameter: 

NODK  Is  an  open  node  handle. 


Exceptions: 

STATUS _ ERROR 

is  raised  If  the  node  handle  NODE  Is  n  >t  open. 

5.1.2.11.  Obtaining  the  relation  name  of  the  laat  relationship  traversed 

function  pathrelation  (node  :  in  node  type) 
return  RELATION  NAME; 


Purpose: 

This  function  returns  the  relation  name  of  the  n  itlonshlp  corresponding  to  the  last  path 
element  of  the  pathname  used  in  opening  this  node  h  (idle.  The  relation  name  Is  returned  even  If 
the  relationship  has  been  deleted. 

Parameter: 

NODE  Is  an  open  node  handle. 


Exceptions: 

STATUS _ ERROR 

Is  raised  If  the  node  handle  NODE  Is  :  t  open. 

5.1.2.12.  Obtaining  a  partial  pathname 

function  base_path(name:  in  namestring) 
return  name  string; 


Purpose: 

This  function  returns  the  pathname  obtained  by  d<  t  ting  the  last  path  element  from  NAME.  It 
does  not  establish  whether  the  pathname  Idenii  "s  an  existing  node;  only  the  syntactic 
properties  of  the  pathname  are  examined.  This  fuii<  tlon  also  checks  the  syntactic  legality  of  the 
pathname  NAME. 

Parameters: 

NAME  Is  a  pathname  (not  necessarily  Identifying  a  node). 
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Exceptions: 

NAME_  ERROR 

Is  raised  if  NAME  Is  s  syntactically  Illegal  pathname. 

5.1.2.13.  Obtaining  the  name  of  the  last  relationship  in  m,  pathname 

function  LAST  RELATION  (NAME:  in  NAMESTRING) 
return  relation  name: 


Purpose: 

This  function  returns  the  name  of  the  relation  of  the  last  path  element  of  the  pathname  NAME, 
it  does  not  establish  whether  the  pathname  identifies  an  existing  node;  only  the  syntactic 
properties  of  the  pathname  are  examined.  This  function  also  checks  the  syntactic  legality  of  the 
pathname  NAME. 

Parameters. 

NAME  Is  a  pathname  (not  necessarily  Identifying  a  node). 


Exceptions: 

NAMF_ ERROR 

Is  raised  If  NAME  is  a  syntactically  Illegal  pathname. 

5.1.2.14.  Obtaining  the  key  of  the  last  relationship  in  a  pathname 

function  LAST JCEY (NAME:  in  NAME  STRING) 

return  relationship  key; 


Purpose: 

This  function  returns  the  relationship  key  or  the  last  path  element  of  the  pathname  NAME.  It 
does  not  establish  whether  the  pathname  Identifies  an  existing  node;  only  the  syntactic 
properties  of  the  pathname  are  examined.  This  function  checks  the  syntactic  legality  of  the 
pathname  NAME. 

Parameters: 

NAME  Is  a  pathname  (not  necessarily  Identifying  a  node). 


Exceptions: 

NAME  _  ERROR 

Is  raised  If  NAME  Is  a  syntactically  illegal  pathname. 

5.1.2.15.  Querying  the  existence  of  a  node 

function  is_obtainable(node:  in  node  type) 
return  boolean; 


Purpose: 

This  function  returns  FAI.SE  If  the  node  Identified  by  NODE  Is  unobtainable  or  Inaccessible.  It 
returns  TRUE  otherwise. 
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Parameters; 

NODK  Is  an  open  node  handle  Identifying  the  node. 


Exceptions: 

STATUS _ ERROR 

is  raised  If  NODE  Is  not  an  open  node  handle. 


Additional  Interfaces: 

function  is_obtainable  (nake :  in  nane_strinc) 
return  boolean 

la 

NODE :  NODE_TYPE; 

RESULT:  BOOLEAN: 
begin 

OPEN  (NODE,  RAKE.  (INEXISTENCE) ) ; 

RESULT  :  =  IS  OBTAINABLE (NODE) ; 

CLOSE (NODE) 
return  result; 
exception 

when  othera  =>  return  False: 
end  IS_QBTAIMABLE . 

function  is_obtathable  (base  :  in  node  type; 

KEY:  in  RELATIONSHIPJCEY; 

RELATION:  in  RELATIONKAKE  :=  DEFAULTRELATION) 

return  boolean 

ie 

NODE.  NODE_TYPE; 

RESULT:  BOOLEAN; 
begin 

OPEN  (NODE.  BASE.  KEY.  RELATION.  (INEXISTENCE))  ; 

RESULT  :=  IS^OBTAINABLE  (NODE)  ; 

CLOSE (NODE) ;' 
return  result; 
exception 

when  others  =>  return  FALSE; 
end  IS  OBTAINABLE; 


Notes: 

OBTAINABLE  can  be  used  to  determine  whether  a  node  Identified  via  a  secondary  relationship 
has  been  made  unobtainable  by  a  DELETE  operation  or  Is  Inaccessible  to  the  current  process 
(see  Note  In  Section  5. 1.2.3). 


6.1.2.10.  Querying  sameness 

function  xs_same(nodei:  in  node_tyfe; 

NODES:  in  NODE_TYPE) 
return  boolean; 

Purpose: 

This  function  returns  TRUE  If  the  node'  Identified  by  Its  arguments  are  the  same  node; 
otherwise.  It  returns  FALSE. 

Parameters: 

NODEI  Is  an  open  node  handle  to  a  node. 
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NODE2  to  an  open  node  handle  to  a  node. 

Exceptions 
STATUS _  ERROR 

to  raised  If  at  least  one  of  the  node  handles,  NODE!  and  NODE2.  to  not  open. 


Additional  Interface: 

function  IS_EAME  (KAME1 :  In  NAME_STRINC; 

NAME?.  in  MAMESTRING) 

return  boolean 

ia 

NQDEl .  MDE2:  NODE  TYPE; 

RESULT:  BOOLEAN: 

begin 

OPEN (N0DE1 .  NAME1.  (1=>E»STENCE) )  ; 

begin 

□PEN (NODES.  NAMES,  (1=>EXISTENCE)  )  ; 

exception 

when  other*  => 

CLOSE (NQDEl) ; 

raise; 

end: 

RESULT  :-  I S  SAME (NODE 1 .  NODES); 

CL0SE(N0DE1)7 

CLOSE (NODES) : 
return  result: 
end  ISSAME; 

Notes: 

Sameness  to  not  to  be  confused  with  equality  of  attribute  values,  relationships  and  contents  of 
nodes,  which  to  a  necessary  but  not  a  sufficient  criterion  for  sameness. 


6.1.2.17.  Obtaining  an  open  node  handle  to  the  parent  node 


procedure  GETPARENT  (PARENT. 

NODE: 
INTENT: 
TIME  LIMIT: 


in  out  NODE_TTPE; 
in  NODE~TTPE; 

in  INTENTION  :=  (1=>READ); 

in  DURATION  :=  NODELAY) ; 


Purpose: 

This  procedure  returns  an  open  node  handle  In  PARENT  to  the  parent  node  of  the  node 
Identified  by  the  open  node  handle  NODE.  The  Intent  under  which  the  node  handle  PARENT  is 
opened  to  specified  by  INTENT.  A  call  on  GET_  PARENT  to  equivalent  to  a  call 
OPEN(PARENT,  NODE,  ”,  PARENT,  INTENT,  TIME-LIMIT). 

Parameters: 

PARENT  to  a  node  handle,  Initially  closed,  to  be  opened  to  the  parent  node. 

NODE  Is  an  open  node  handle  Identifying  the  node. 

INTENT  to  the  intent  of  subsequent  operations  on  the  node  handle  PARENT. 

TIME_  LIMIT  Is  a  value  or  type  DURATION,  specifying  a  time  limit  for  the  delay  on  waiting  for 
the  unlocking  of  the  parent  node  In  accordance  with  the  desired  INTENT. 
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Exceptions: 

NAME  _  ERROR 

Is  raised  If  the  node  identified  by  NODE  Is  a  top-level  node  or  If  Its  parent  node  Is 
Inaccessible. 

USE_  ERROR  Is  raised  If  the  specified  INTENT  Is  an  empty  array. 

STATUS_  ERROR 

is  raised  If  the  node  handle  PARENT  Is  open  prior  to  the  call  or  If  the  node  handle 
NODE  Is  not  open. 

LOCK  _  ERROR 

Is  raised  If  the  opening  of  the  parent  node  Is  delayed  beyond  the  specified 
TIME_LIMIT  due  to  the  existence  of  locks  In  conflict  with  the  specified  INTENT. 

INTENT  _  VIOLATIO  N 

is  raised  if  NODE  was  not  opened  with  an  intent  establishing  the  right  to  read 
relationships. 

ACCESS  _  VIOLATION 

Is  raised  If  the  current  process'  discretionary  access  control  rights  are  Insufficient  to 
obtain  access  to  the  parent  node  with  the  specified  INTENT. 
ACCESS _ VIOLATION  Is  raised  only  If  the  conditions  Tor  NAME_ ERROR  are 
not  present. 

SECURITY_VIOLATION 

is  raised  If  the  attempt  to  gain  with  the  specified  INTENT  access  to  the  parent 
node  represents  a  violation  of  mandatory  access  controls  for  the  CAIS. 
SECURITY  _ VIOLATION  is  raised  only  If  the  conditions  for  other  exceptions  are 
not  present. 


5.1.2.18.  Copying  m  node 


procedure  copt  wode  craoa 

to_base . 

TtJJCET: 

TO  RELATION : 


in  RODE_TYPE; 

In  NODE”  TYPE ; 
in  RELATIOHSHIPJCEY; 

in  relatior_rak£ 

: -DEFAULT  RELATION) ; 


Purpose: 


This  procedure  copies  a  file  or  structural  node  that  does  not  have  emanating  primary 
relationships.  The  node  copied  Is  Identified  by  the  open  node  handle  FROM  and  Is  copied  to  a 
newly  created  node.  The  new  node  Is  Identified  by  the  combination  of  the  TO_8ASE, 
TO_KEY  and  TO_RELATION  parameters.  The  newlv  created  node  Is  of  the  same  kind  as  the 
node  Identified  by  FROM.  If  the  node  Is  a  file  node,  Its  contents  are  also  copied.  I.e.,  a  new 
copied  file  Is  created.  Any  secondary  relationships  emanating  from  the  original  node,  excepting 
the  relationship  of  the  predefined  relation  PARENT  (which  Is  appropriately  adjusted),  are 
recreated  In  the  copy.  If  the  target  of  the  original  node's  relationship  Is  the  node  Itself,  then  the 
copy  has  an  analogous  relationship  to  Itself.  Any  other  secondary  relationship  whose  target  Is 
the  original  node  Is  unaffected.  All  attributes  of  the  FROM  node  are  also  copied.  Regardless  of 
any  locks  on  the  node  Identified  by  FROM,  the  newly  created  node  Is  unlocked. 


Parameters: 
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FROM  Is  an  open  node  handle  to  the  node  to  be  copied. 

TO_BASE  la  an  open  node  handle  to  the  base  node  for  Identification  of  the  node  to  be  created. 

TO  KEY  la  a  relationship  key  for  the  Identification  of  the  node  to  be  created 


TO  _  RELATION 

la  a  relation  name  for  the  Identification  of  the  node  to  be  created. 


Exceptions: 

NAME _ ERROR 

la  raised  If  the  new  node  Identification  Is  Illegal  or  If  a  node  already  exists  with  the 
Identification  given  for  the  new  node. 

USE_ERROR  is  raised  If  the  original  node  Is  not  a  file  or  structural  node  or  If  any  primary 
relationships  emanate  from  the  original  node.  USE_ERROR  Is  also  raised  if 
TO_RELATION  Is  the  name  of  a  predefined  relation  that  cannot  be  modified  or 
created  by  the  user. 

STATUS_ ERROR 

is  raised  If  the  node  handles  FROM  and  TO_BASE  are  not  both  open. 

INTENT_  VIOLATION 

Is  raised  If  FROM  was  not  opened  with  an  Intent  establishing  the  right  to  read 
contents,  attributes,  and  relationships  or  If  TO_BASE  was  not  opened  with  an 
Intent  establishing  the  right  to  append  relationships.  INTENT _ VIOLATION  Is  not 
raised  If  the  conditions  for  NAME _  ERROR  are  present. 

SECURITY  VIOLATION 

Is  raised  if  the  operation  represents  a  violation  of  mandatory  access  controls  and  the 
conditions  for  other  exceptions  are  not  present. 


Additional  Interface: 

procedure  copy jkjde (fwm  .  in  bod£_TYPE; 

TO:  in  HAM£~ STRING) 

is 

TOBASE.  BODEJTYPE; 
begin 

OPES (TOBASE ,  BASEPATH(TO) .  (t=>APPEND_RELATIOXSHIPS) ) ; 
COPYNODE (FROS ,  TO'bASE,  LAST  KEY  CTO) .  LASTJIELATIOS  (TO) ) ; 
CLOSi (TOBASE) ; 
exception 

when  others  => 

CLOSE (TD_BASE) ; 
raise; 
end  COPY_SODE; 


40 


PROPOSED  MIL-STD-CaJS 
31  JAM  ARY  18*5 


5.1.2.10.  Copying  trees 


procedure  cofy_tree (from : 

T0_BASE . 
TOJCEY: 

TO  RELATION : 


in  M0DE_TYPE; 
in  node”type  . 

in  RELATIONSHIPKEY; 
in  RELATION  NAME 
: =DEFAULT  RELATION) ; 


Purpose 


This  procedure  copies  a  tree  of  file  or  structural  nodes  formed  by  primary  relationships 
emanating  from  the  node  Identified  by  the  open  node  handle  FROM.  Primary  relationships  are 
recreated  between  corresponding  copied  nodes.  The  root  node  of  the  newly  created  tree 
corresponding  to  the  FROM  node  Is  the  node  Identified  by  the  combination  of  the  TO __  BASE, 
TO  KEY  and  TO_RELAT)ON  parameters.  If  an  exception  Is  raised  by  the  procedure,  none  or 
the  nodes  are  copied.  Secondary  relationships,  attributes,  and  node  contents  are  copied  as 
described  for  COPY _ NODE  with  the  following  additional  rules:  secondary  relationships 
between  two  nodes  which  both  are  copied  are  recreated  between  the  two  copies.  Secondary 
relationships  emanating  from  a  node  which  Is  copied,  but  which  refer  to  nodes  outside  the  tree 
being  copied,  are  copied  so  that  they  emanate  from  the  copy,  but  still  refer  to  the  original  target 
node.  Secondary  relationships  emanating  from  a  node  which  Is  not  copied,  but  which  refer  to 
nodes  Inside  the  tree  being  copied,  are  unaffected.  If  the  node  identified  by  TO_BASF.  If  part 
of  the  tree  to  be  copied,  then  the  copy  of  the  node  Identified  by  FROM  will  not  be  copied 
recursively. 


Parameters: 

FROM  Is  an  open  node  handle  to  the  root  node  of  the  tree  to  be  copied. 

TO  _  BASE  Is  an  open  node  handle  to  the  base  node  for  identification  of  the  node  to  be  created 

as  root  of  the  new  tree. 


TO_KEY  la  a  relationship  key  for  the  identification  of  the  node  to  be  created  as  rooi  of  the 
new  tree. 


TO_  RELATION 

la  a  relation  name  for  the  Identification  of  the  node  to  be  created  as  root  of  the  new 
tree. 


Exceptions: 

NAME _ ERROR 

Is  raised  If  the  new  node  Identification  Is  Illegal  or  If  a  node  already  exists  with  the 
Identification  given  for  the  new  node  to  be  created  as  a  copy  of  the  node  identified 
by  FROM. 

ST ATUS_  ERROR 

Is  raised  If  the  node  bandies  FROM  and  TO  _  BASE  are  not  both  open. 

USE _  ERROR  Is  raised  If  the  original  node  Is  not  a  file  or  structural  node.  USE _  ERROR  Is  also 
raised  If  TO_RELATION  Is  the  name  of  a  predefined  relation  that  cannot  be 
modified  or  created  by  the  user. 

LOCK  _  ERROR 

Is  raised  If  any  node  to  be  copied  except  the  node  Identified  by  FROM.  Is  locked 
against  read  access  to  attributes,  relationships  or  contents. 
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INTENT  _  VIOLATION 

is  raised  If  FROM  Is  not  op -n  with  an  Intent  establishing  the  right  to  read  node 
contents,  attributes  and  rein  lonshlps  or  if  TO_BASE  is  not  open  with  an  intent 
establishing  the  right  to  ;i|  i>end  relationships.  INTENT_V70LATI0N  Is  only 
raised  if  the  conditions  for  N  \ME_ERROR  are  not  present. 

ACCESS_  VIOLATION 

is  raised  If  the  current  process'  discretionary  access  control  rights  are  Insufficient  to 
obtain  access  to  each  node  to  be  copied  with  Intent  READ. 
ACCESS _ VIOLATION  is  not  raised  If  conditions  for  NAME_ ERROR  are  present. 

SECURITY  _  VIOLATION 

is  raised  If  the  operation  represents  a  violation  of  mandatory  access  controls  and  the 
conditions  for  other  exceptions  are  not  present. 


Additional  Interface: 

procedure  copy_tree  (from  :  in  hode  type; 

TO:  in  NAME  STRING) 

ia 

TOBASE  NODE  JTYPE . 
begin 

OPEN  (T0_BA5E .  BASE_PATH(TO)  .  (1  =  >APPETO_RELATI0MSK1PS)  )  ; 
COPYTREE  CEROM .  TO  BASE.  LAST_ICEY (TO)  .  LAST_RELATIOH  (TO)  )  ; 
CLOsi (TOBASE) ; 
exception 

when  others  => 

CLOSE (TOBASE) . 
raise: 
end  copy  tree; 


5.1.2.20.  Renaming  the  primary  relationship  of  a  node 


procedure  rename  (mode  :  in  node  type; 

NENBASE:  in  NODE  TYPE; 

NENKEY.  in  R£LATIONSHIP_KEY; 

NENRELATION :  in  RELATI 0NNAME 

: “DEFAULT  RELATION); 


Purpose: 


This  procedure  renames  a  file  or  structural  node.  It  deletes  the  primary  relationship  to  the  node 
Identified  by  NODE  and  installs  a  new  primary  relationship  to  the  node,  emanating  from  the 
node  Identified  by  NEW _ BASE,  with  key  and  relation  name  given  by  the  NEW _ KEY  and 
NEW_RELATION  parameters.  The  parent  relationship  Is  changed  accordingly.  This  changes 
the  unique  primary  pathname  of  the  node.  Existing  secondary  relationships  with  the  renamed 
node  as  target  track  the  renaming,  l.e.,  they  have  the  renamed  node  as  target. 


Parameters: 

NODE  Is  an  open  node  handle  to  the  node  to  be  renamed. 

NEW_HASE  Is  an  open  node  handle  to  the  base  node  from  which  the  new  primary  relationship  to 
the  renamed  node  emanates. 

NEW _ KEY  Is  a  relationship  key  for  the  new  primary  relationship. 
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Parameters: 

NODE  Is  an  open  node  handle  to  a  node  whose  attribute  Is  to  b  ■  deleted. 

ATTRIBUTE  Is  the  name  of  the  attribute  to  be  deleted. 

Exceptions: 

USE_ERROR  Is  raised  if  the  node  does  not  have  an  attribute  of  the  given  name.  USE_ ERROR  is 
also  raised  If  ATTRIBUTE  is  the  name  of  a  predefined  node  attribute  which  cannot 
be  modified  or  created  by  the  user. 

STATUS_ ERROR 

Is  raised  if  the  node  handle  NODE  Is  not  open. 

INTENT_  VIOLATION 

Is  raised  If  NODE  was  not  opened  with  an  intent  establishing  the  right  to  write 
attributes. 

SECURITY  _  VIOLATION 

Is  raised  If  the  operation  represents  a  violation  of  mandatory  access  controls. 
SECURITY  _ VIOLATION  is  raised  only  if  the  conditions  for  other  exceptions  are 
not  present. 


Additional  Interface: 

procedure  DELETENODEATTRIBUTE  (HAKE  :  in  NARESTRING; 

ATTRIBUTE:  in  ATTRIBUTE  MARE) 

is 

MODE:  MODE  TYPE; 
begin 

OPEN (MODE.  MARE.  (1=>*RITE  ATTRIBUTES) ) ; 

DELETE  MODE  ATTRIBUTECMODeT  ATTRIBUTE); 

CLOSE  (MODE)  ; 

exception 

when  others  => 

CLOSE (NODE) ; 

raise. 

end  DEUTE_NODE_ ATTRIBUTE; 


5. 1.3. 4.  Deleting  path  attributes 


procedure  delete_path_attribute (base : 

MET: 

RELATION: 

ATTRIBUTE: 


In  NODEjnrpE; 
in  RELATIONSHIP  KEY; 
in  RELATIONNARE 
: *DEP AULT_RELATI ON ; 
in  ATTRIBUTE_NARE) ; 


Purpose: 


This  procedure  deletes  an  attribute,  named  by  ATTRIBUTE,  or  a  relationship  Identified  by  the 
base  node  BASE,  the  relation  name  RELATION  and  the  relationship  key  KEY. 


Parameters: 

BASE  la  an  open  node  handle  to  the  node  from  which  the  relationship  emanates 
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ATTRIBUTE  Is  the  ftttrlbute  name. 

VALUE  is  the  Initial  value  of  the  attribute. 


Exceptions: 

NAME_ ERROR 

Is  raised  If  the  relationship  Identified  by  the  BASE,  KEY  and  RELATION 
parameters  does  not  exist. 

USE_ERROR  is  raised  If  the  relationship  already  has  an  attribute  of  the  given  name  or  if  the 
attribute  name  given  Is  syntactically  Illegal.  USE_ERROR  Is  also  raised  If 
RELATION  is  the  name  of  a  predefined  relation  that  cannot  be  modified  by  the 
user.  USE_ ERROR  is  also  raised  If  ATTRIBUTE  Is  the  name  of  a  predefined 
relationship  attribute  which  cannot  be  created  by  the  user. 

STATUS _ ERROR 

Is  raised  If  the  node  handle  BASE  Is  not  open. 

INTENT  _  VIOLATION 

is  raised  If  BASE  was  not  opened  with  an  Intent  establishing  the  right  to  write 
relationships. 

SECURITY_  VIOLATION 

Is  raised  If  the  operation  represents  a  violation  or  mandatory  access  controls. 
SECURITY_ VIOLATION  is  raised  only  If  the  conditions  for  other  exceptions  are 
not  present. 

Additional  Interface: 

procedure  CHEATEPATHATTRIBUTE (HAKE  in  NAMESTRIHG. 

ATTRIBUTE :  in  ATTRIBUTEJtAME ; 

VALUE:  in  LIST  TYPE) 

is 

BASE:  BODETYPE; 
begin 

OPES (BASE,  BASEPATH (BABE) .  (1=>*RITE_RELATI0BSHIPS) ) ; 

CREATE_PATH_ATTRIBUTE  (BASE .  LAST  JCET  (SAME)  .  LAST  RELATION  (SAXE)  . 

ATTRIBUTE , ~VALUE ) ; 

CLOSE  (BASE)  ; 
exception 

when  others  => 

CLOSE (BASE) ; 

raise: 

end  CREATE_PATH_ ATTRIBUTE . 


6. 1.3. 3.  Deleting  node  attributes 

procedure  delete_sode_attribute  (bode  :  in  sooe  type; 

ATTRIBUTE.  In  ATTRIBUTE  RAKE); 


Purpose: 

This  procedure  deletes  an  attribute,  named  by  ATTRIBUTE,  of  the  node  identified  by  the  open 
node  handle  NODE. 
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name  given  Is  syntactically  Illegal.  USE_ERROR  Is  also  raised  If  ATTRIBUTE  Is 
tbe  name  of  a  predefined  node  attribute  which  cannot  be  created  by  the  user. 


STATUS _ ERROR 

Is  raised  If  the  node  handle  NODE  Is  not  open. 


INTENT  _  VIOLATION 

Is  raised  If  NODE  was  not  opened  with  an  Intent  establishing  the  right  to  append 
attributes. 

SECURITY_  VIOLATION 

Is  raised  If  the  operation  represents  a  violation  of  mandatory  access  controls. 
SECURITY_  VIOLATION  Is  raised  only  If  the  conditions  for  other  exceptions  are 
not  present. 

Additional  Interface: 

procedure  create_rode_attribute  (rare  :  in  rare_strirg; 

ATTRIBUTE:  in  ATTRI BtTTE_ NAME ; 

VALUE:  in  LIST  TYPE) 

to 

■ODE:  RODETYPE. 

begin 

OPEN  (NODE,  MAKE.  (1=>APPEMD_ATTRI8UTES) )  ; 

CREATE  RODE  ATTR I BUTE  (RODE . “ATTRIBUTE .  VALUE) ; 

CLOSE (MODE) 7 
exception 

when  others  *> 

CLOSE (RODE) ; 
raise: 

end  CREATE  RODE  ATTRIBUTE; 


6. 1.3.2.  Creating  path  attributes 


procedure  createpath  attribute  CHASE: 

KEY: 

RELATIOR : 

ATTRIBUTE: 

VALUE. 


in  rqdejtype; 
in  relatiorshipjcet; 
in  RELATIORRAKE 
: “DEFAULT  RELATIOR; 
in  ATTRIBUTEJURE; 
in  LIST  TYPE): 


Purpose: 

This  procedure  creates  an  attribute,  named  by  ATTRIBUTE,  of  a  relationship  and  sets  Its  Initial 
value  to  VALUE.  The  relationship  Is  identified  by  the  base  node  identified  by  the  open  node 
handle  BASE,  the  relation  name  RELATION  and  the  relationship  key  KEY. 

Parameters: 

BASE  Is  an  open  node  handle  to  the  node  from  which  the  relationship  emanates. 

KEY  Is  the  relationship  key  of  the  affected  relationship. 

RELATION  Is  the  relation  name  of  the  affected  relationship. 
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ACCESS  _  VIOLATION 

Is  raised  If  the  current  process'  discretionary  access  control  rights  are  Insufficient  to 
obtain  access  to  the  current  node  with  the  specified  INTENT. 
ACCESS _ VIOLATION  is  raised  only  If  the  conditions  for  NAME_ERROR  are 
not  present. 

SECURITY  _  VIOLATION 

Is  raised  If  the  operation  represents  a  violation  of  mandatory  access  controls. 
SECURITY_V!OLATION  Is  raised  only  If  the  conditions  other  exceptions  are  not 
present. 


Notes: 

The  call  on  GET _ CURRENT _ NODE  is  equivalent  to  OPEN(NODE,  "  CURRENT _ NODE". 
(INTENT.TIME_LIMIT)). 


5.1.3.  Package  ATTRIBUTES 

This  package  supports  the  definition  and  manipulation  of  attributes  for  nodes  and  relationships.  The 
name  of  an  attribute  follows  the  syntax  of  an  Ada  identifier.  The  value  of  each  attribute  is  a  list;  the 
format  of  the  list  Is  defined  by  the  package  LIST _ UTILITIES  (see  Section  5.4).  Upper  and  lower  case 
distinctions  are  not  significant  within  the  attribute  names. 

Unless  slated  otherwise,  the  attributes  predefined  by  the  CAIS  cannot  be  created,  deleted  or  modified 
by  the  user. 

The  operations  defined  for  the  manipulation  of  attributes  Identify  the  node  to  which  an  attribute 
belongs  either  by  pathname  or  open  node  handle.  They  Implicitly  identify  a  relationship  to  which  an 
attribute  belongs  by  the  last  path  element  of  a  pathname  or  explicitly  Identify  the  relationship  by 
base  node,  key  and  relation  name  Identification. 

5.I.3.I.  Creating  node  attributes 

procedure  CREATE_>IQDE_ATTRIBUTE  (KOBE :  in  BODETYPE; 

ATTRIBUTE:  in  ATTRIBUTE  RARE; 

VALUE:  in  LIST  TYPE): 


Purpose: 

This  procedure  creates  an  attribute  named  by  ATTRIBUTE  of  the  node  Identified  by  the  open 
node  handle  NODE  and  sets  Its  Initial  value  to  VALUE. 

Parameters: 

NODE  Is  an  open  node  handle  to  a  node  to  receive  the  new  attribute. 

ATTRIBUTE  Is  the  name  of  the  attribute. 

VALUE  Is  the  Initial  value  of  the  attribute. 


Exceptions: 

USE  ERROR  Is  raised  If  the  node  already  has  an  attribute  of  the  given  name  or  If  the  attribute 
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SECURITY  _  VIOLATION 

Is  raised  if  the  operation  represents  a  violation  of  mandatory  access  controls. 
SECUR1TY_  VIOLATION  is  raised  only  If  the  conditions  Tor  other  exceptions  are 
not  present. 


Additional  Interface: 

procedure  set  current  node  (name:  in  name  string) 

ie 

NODE:  NCDE_TTPE. 
begin 

OPEN  (NODE,  NAME.  (1»EXISTENCE) )  ; 

SET  CURRENT_NODE (NODE) ; 
exception 

when  other*  => 

CLOSE (NODE) : 
raise: 

end  SET  CURRENT  NODE: 


5.1.2.30.  Opening  a  node  handle  to  the  current  node. 

procedure  get_current_node  (node  :  in  out  node  ttpe; 

INTENT:  in  INTENTION :  = 

(INEXISTENCE) ; 

TIME  LIMIT:  in  DURATION :=N0  DELAY): 


Purpose: 

This  procedure  returns  in  NODE  an  open  node  handle  to  the  curron  node  or  the  current 
process;  the  Intent  with  which  the  node  handle  is  opened  as  specii  d  by  the  INTENT 
parameter. 

Parameter: 

NODE  la  a  node  handle.  Initially  closed,  to  be  opened  to  the  current  node. 

INTENT  Is  the  Intent  of  subsequent  operations  on  the  node  handle  NODE. 

TIME_LIMIT  is  a  value  of  type  DURATION  specifying  a  time  limit  for  the  delay  on  waiting  for 
the  unlocking  of  the  node  in  accordance  with  the  desired  INTENT. 


Exceptions: 

NAME  _  ERROR 

is  raised  If  the  current  node  Is  Inaccessible  or  if  It  Is  unobtainable  and  the  INTENT 
Is  anything  other  than  EXISTENCE. 

USE_ERROR  Is  raised  If  INTENT  Is  an  empty  array. 

STATUS_ ERROR 

Is  raised  If  NODE  Is  an  open  node  handle  prior  to  the  call. 

LOCK  _  ERROR 

Is  raised  If  access,  with  Intent  READ_REI.ATIONSHIPS,  to  the  current  process 
node  cannot  be  obtained  due  to  an  existing  lock  on  the  node. 
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INTENT  to  the  Intent  of  subsequent  operations  on  the  node  handle  NEXT__NODE. 

TIME_LIMIT  to  a  value  of  type  DURATION,  specifying  a  time  limit  for  the  delay  on  waiting  for 
the  unlocking  of  the  node  In  accordance  with  the  desired  INTENT. 


Exceptions: 

NAME _ ERROR 

to  raised  If  the  node  whose  node  handle  Is  to  be  returned  In  by  NEXT_NODE  is 
unobtainable  and  If  the  INTENT  Includes  any  Intent  other  than  EXISTENCE. 

USE_  ERROR  Is  raised  If  the  ITERATOR  has  not  been  previously  set  by  ITERATE  or  if  the 
Iterator  to  exhausted  (l.e.,  MORE  (ITERATOR)=FALSE)  or  If  INTENT  Is  an 
empty  array. 

LOCK  _  ERROR 

is  raised  if  the  opening  of  the  node  Is  delayed  beyond  the  specified  TIME_  LIMIT 
due  to  the  existence  of  locks  In  conflict  with  the  specified  INTENT. 

ACCESS_  VIOLATION 

Is  raised  if  the  current  process'  discretionary  access  control  rights  are  insufficient  to 
obtain  access  to  the  next  node  with  the  specified  INTENT.  Access  Violation  is 
raised  only  If  the  conditions  for  NAME_ ERROR  are  not  present. 

SECURITY_  VIOLATION 

Is  raised  If  the  current  process'  attempt  to  obtain  access  to  the  next  node  with  the 
specified  INTENT  represents  a  violation  of  mandatory  access  controls  for  the  CAiS. 
SECURITY_VIOLATION  Is  raised  only  If  the  conditions  for  other  exceptions  are 
not  present. 

6.1.2.20.  Setting  the  current  node  relationship 

procedure  srr  ctflWEirTjraDE  (mode  .  in  dODE  TTPE) ; 


Purpose: 

This  procedure  specifies  the  node  Identified  by  NODE  as  the  current  node.  The  relationship  of 
the  predefined  relation  CURRENT_NODE  of  the  current  process  Is  changed  accordingly. 


Parameters: 

NODE  to  an  open  node  handle  to  a  node  to  be  the  new  target  of  the  CURRKNT_NODE 

relationship  emanating  from  the  current  process  node. 


Exceptions: 

STATUS _ ERROR 

to  raised  If  the  node  handle  NODE  Is  not  open. 
LOCK  ERROR 


to  raised  If  access,  with  Interl  WRITE_ RELATIONSHIPS,  to  the  current  process 
node  cannot  be  obtained  due  to  an  existing  lock  on  the  node. 
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RELATION :  in  RELATION_NAME_PATTERN 

:=  DEFAULT  RELATION? 
PRIMARYJWLY:  in  BOOLEAN  :  =  TRUE) 

la 

NODE:  NODE_TYPE; 
begin 

OPEN (NODE,  HAKE.  (1=>READ  RELATIONSHIPS)); 

ITERATE (ITERATOR,  NODE.  KIND,  KEY,  RELATION,  PRINARY_OKLY) ; 
CLOSE (NODE) ; 
exception 

when  other*  => 

CLOSE (NODE) ; 
raise; 

end  ITERATE; 


Notes: 

The  functions  PATH _ KEY  and  PATH _ RELATION  may  be  used  to  determine  the  relationship 
which  caused  the  node  to  be  Included  In  the  Iteration.  The  Iteration  Interfaces  can  be  used  to 
determine  relationships  to  Inaccessible  or  unobtainable  nodes. 


5.1.2.27.  Determining  iteration  status 

function  more  (iterator;  in  node  iterator) 
return  boolean; 


Purpose: 

The  function  MORE  returns  FALSE  If  all  nodes  contained  In  the  node  iterator  have  been 
retrieved  with  the  GET_  NEXT  procedure;  otherwise  It  returns  TRUE. 

Parameters: 

ITERATOR  la  a  node  Iterator  previously  set  by  the  procedure  ITERATE. 


Exceptions: 

USE_ERROR  is  raised  if  the  ITERATOR  has  not  been  previously  set  by  the  procedure  ITERATE. 


5.1.2.28.  Getting  the  next  node  in  an  iteration 


procedure  cet  next (iterator.  in  out 
NEXT_NODE:  in  OUt 
INTENT ;  in 
TINE  LIMIT:  in 


BODE_nXRATOR; 

NODE”  TYPE; 

INTENTION  :=  (INEXISTENCE)  . 
DURATION  :«  NO  DELAY); 


Purpose: 


The  procedure  GET _ NEXT  returns  an  open  node  handle  to  the  next  node  In  the  parameter 
NEXT_NODE;  the  Intent  under  which  the  node  handle  Is  opened  Is  specified  by  the  INTENT 
parameter.  If  NEXT_NODE  Is  open  prior  to  the  call  to  GET_NEXT,  It  is  closed  prior  to  being 
opened  to  the  next  node.  A  time  limit  can  be  specified  for  the  maximum  delay  permitted  if  the 
node  to  be  opened  Is  locked  agAinst  access  with  the  specified  INTENT. 


Parameters: 

ITERATOR  Is  a  node  iterator  previously  set  by  ITERATE. 

NEXT  _  NODE 

Is  a  node  handle  to  be  opened  to  the  next  node  on  the  ITERATOR. 
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relationship  key.  The  effect  on  existing  iterators  of  creation  or  deletion  of  relationships  Is 
Implementation-defined. 


S. 1.2.26.  Creating  an  Iterator  over  nodes 


procedure  iterate  (iterator  : 

■ODE: 

KIND : 

KEY. 

RELATION : 
PRIMARY  only 


out  IKBE_ ITERATOR ; 
in  BQDE_TTPE, 
in  MODE 'kind, 

in  RELATIOMSHIP_KEY_PATTERN 
in  RELATION_NAM£_PATrERN 
:*  DEFAULT_R£LATI0n7 
:  in  BOOLEAN  : *  TRUE) ; 


Purpose: 


This  procedure  establishes  a  node  Iterator  ITERATOR  over  the  set  of  nodes  that  are  the  targets 
of  relationships  emanating  from  a  given  node  identified  by  NODE  and  matching  the  specified 
KEY  and  RELATION  patterns.  Nodes  that  are  of  a  different  kind  than  the  KIND  specified  are 
omitted  by  subsequent  calls  to  GET_NEXT  using  the  resulting  ITERATOR.  If 
PRIMARY_ONLY  to  true,  then  the  Iterator  will  be  based  on  only  primary  relationships. 


Parameters: 

ITERATOR 

NODE 

KIND 

KEY 

RELATION 

PRIMARY 


is  the  no<le  iterator  returned. 

is  an  open  node  handle  to  a  node  whose  relationships  form  the  basis  for  constructing 
the  Iterator. 

Is  the  kind  or  nodes  on  which  the  Iterator  Is  based. 

Is  the  pattern  for  the  relationship  keys  on  which  the  Iterator  is  based, 
is  the  pattern  for  the  relation  names  on  which  the  Iterator  is  based. 

ONLY 


Is  a  boolean;  If  TRUE,  the  Iterator  will  be  based  on  only  primary  relationships;  If 
FAI.SE.the  iterator  will  be  based  on  all  relationships  satisfying  the  patterns. 


Exceptions: 

USE_ ERROR  Is  raised  If  the  pattern  given  In  KEY  or  RELATION  Is  syntactically  illegal. 

STATUS _ ERROR 

is  raised  If  NODE  Is  not  an  open  node  handle. 

INTENT_  VIOLATION 

Is  raised  If  NODE  was  not  opened  with  an  Intent  establishing  the  right  to  read 
relationships. 


Additional  Interface; 

procedure  iterate  (iterator  : 

NAME: 

RIND: 

KEY; 


OUt  NODE_ ITERATOR ; 
in  NAME_SntINC; 
in  nodejcind; 

in  RELATIOHSKIPKETPATTERN  := 
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RELATION  Is  the  relation  name  of  the  relationship  to  be  deleted. 


Exceptions: 

NAME_  ERROR 

Is  raised  If  the  relationship  Identified  by  BASE.  KEY  and  RELATION  does  not 
exist. 

USE_ERROR  Is  raised  If  the  specified  relationship  Is  a  primary  relationship.  USE_ ERROR  Is 
also  raised  If  RELATION  Is  the  name  of  a  predefined  relation  that  cannot  be 
modified  or  created  by  the  user. 

STATUS  _  ERROR 

Is  raised  If  the  BASE  Is  not  an  open  node  handle. 

INTENT  VIOLATION 

Is  raised  If  BASE  was  not  opened  with  an  intent  establishing  the  right  to  write 
relatior  ships. 

SECURITY^  VIOLATION 

Is  raised  If  the  operation  represents  a  violation  of  mandatory  access  controls. 
SECURITY_V10LATI0N  is  raised  only  If  the  conditions  for  other  exceptions  are 
not  present. 


Additional  Interface: 

procedure  unlink (name :  in  kamestring) 

is 

BASE:  NQDETYPE ; 
begin 

OPEN  (BASE,  BASE_PATH  (NAME)  .  a=>NRITE_RELATIONSHIPS)>  ; 
UNLINK (BASE.  LAST_KEY (NAME) .  LASTRELATION (NAME) ) ; 
CLOSE(BASE); 
exception 

when  others  => 

CLOSE (BASE); 
raise; 

end  UNLINK; 


Notes: 

UNLINK  can  be  used  to  delete  secondary  relationships  to  nodes  that  have  become  unobtainable. 


S.l.2.25.  Node  iteration  types  and  subtypes 

type  node _ iterator  is  limited  private; 
subtype  rjelationshipkeypattern  is  RELATIONSHIPJCEY; 
subtype  relation_name_pattern  is  relation  name; 

These  types  are  used  in  the  following  Interfaces  for  Iterating  over  a  set  of  nodes. 
RELATIONSHIP _KEY_  PATTERN  and  RELATION  _  NAME  _  PATTERN  follow  the  syntax  of 
relationship  keys  and  relation  names,  except  that  7’  will  match  any  single  character  and  '*’  will  match 
any  string  of  characters.  NODE _ ITERATOR  Is  a  private  type  assumed  to  contain  the  bookkeeping 
Information  necessary  for  the  Implementation  of  the  MORE  and  GET _ NEXT  functions.  The  nodes 
are  returned  by  GET  NEXT  In  ASCII  lexicographical  .order  by  relation  name  and  then  by 
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NAME  _  ERROR 

is  raised  if  the  relationship  key  or  the  relation  name  are  Illegal  or  If  a  node  already 
exists  with  the  identification  given  by  NEW_BASE,  NEW_KEY,  and 
NEW  _  RELATION. 

USE_ERROR  is  raised  If  NEW_RELATION  la  the  name  of  a  predefined  relation  that  cannot  he 
modified  or  created  by  the  user. 

STATUS _ ERROR 

is  raised  if  the  node  handles  NODE  and  NEW _ BASE  are  not  open. 

INTENT  _  VIOLATIO  N 

is  raised  If  NEW  _  BASE  was  not  opened  wtth  an  Intent  establishing  the  right  to 
append  relationships. 

SECURITY  _  VIOLATION 

is  raised  if  the  operation  represents  a  violation  of  mandatory  access  controls. 
SECURITY _  VIOLATION  is  raised  only  If  the  conditions  for  other  exceptions  are 
not  present. 


Additional  Interface: 

procedure  link  (node  :  in  node  ttpc: 

HEN  MANE:  In  NAMESTRING) 

is 

NENBASE:  NODE_TYPE; 
begin 

OPEN  (MEN  BASE.  BASE  PATH  (NENKANE)  .  U=>APPEND_RELATIONSHIPS)  )  ; 
LINK  (NODE.  HEN  BASE?  LASTKEY  (NENNANE)  . 

LA5?_RELATI0N (NEW  MANE)); 

CLOSE  (NEN  BASE)  ; 
exception 

when  others  => 

CLOSE  (NEN  BASE)  ; 
raise: 
end  LINK; 


5.1.2.24.  Deleting  secondary  relationships 


procedure  unlink  (base:  in  nodetype; 

KEY.  in  RELATIONSHIPJCEY; 

RELATION,  in  RELATI ON_RAKE 

: =DEFAULT_RELATION) ; 

Purpose: 


This  procedure  deletes  a  secondary  relationship  Identified  by  the  BASE,  KEY  and  RELATION 
parameters. 


Parameters: 

BASE  Is  an  open  node  handle  to  the  node  from  which  the  relationship  emanates  which  Is 

to  be  deleted. 

KEY  Is  the  relationship  key  of  the  relationship  to  be  deleted. 
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ACCESS  _  VIOLAT  ION 

is  raised  If  the  current  process  does  not  have  sufficient  discretionary  access  control 
rights  to  obtain  access  to  the  parent  of  the  node  specified  by  NODE  with  Intent 
WRITE_ RELATIONSHIPS  or  to  obtain  access  to  any  target  node  of  a  primary 
relationship  to  be  deleted  with  Intent  EXCLUSIVE _  WRITE  and  the  conditions  for 
NAME _  ERROR  are  not  present. 

SECURITY  _  VIOLATION 

is  raised  If  the  operation  represents  a  violation  of  mandatory  access  controls. 
SECURITY _  VIOLATION  is  raised  only  If  the  conditions  for  other  exceptions  are 
not  present. 


Additional  Interface: 

procedure  delete  tree  Chare:  in  hare  string) 

is 

NODE:  NODEjnrPE; 
begin 

OPEN (NODE.  HARE,  (EXCLUSrVE_*RITE.READ_RELATIOKSHIPS)) ; 
DELETE  TREE (NODE) ; 
exception 

when  others  => 

CLOSE (NODE) : 
raise: 

end  DELETE  TREE: 


Notes: 

This  operation  can  be  used  to  delete  more  than  one  primary  relationship  In  a  single  operation. 


5.1.2.23.  Creating  secondary  relationships 

procedure  LINK  (NODE:  in  HDDETTPE; 

NEN  BASE:  in  NODEjnrPE; 

NEV  KET  in  RELATIONSHIP JCET; 

KEv'rELATTON:  in  RELATIONNAHE 

:  =DEJ- AULTJtELATION)  ; 

Purpose: 

This  procedure  creates  a  secondary  relationship  between  two  existing  nodes.  The  procedure 
takes  a  node  handle  NODE  on  the  target  node,  a  node  handle  NEW_BASE  on  the  source  node, 
and  an  explicit  key  NEW  _ KEY  and  relation  name  NEW _ RELATION  for  the  relationship  to 
be  established  from  NEW  _  BASE  to  NODE. 

Parameters: 

NODE  is  an  open  node  handle  to  the  node  to  which  the  new  secondary  relationship  points. 

NEW_BASE  Is  an  open  node  handle  to  the  base  node  from  which  the  new  secondary  relationship 
to  the  node  emanates. 

NEW _ KEY  Is  the  relationship  key  for  the  new  secondary  relationship. 

NEW  _  RELATION 

is  the  relation  name  for  the  new  secondary  relationship. 


Exceptions: 
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■ODE:  IKJDE_TTPE; 
begin 

OPEN  (NODE.  NAME.  (EXO-ITS  TVE_WR  ITE .  READ  RELATI 0M8HI  PS  )  )  . 
DELETENODE (MODE) ; 

exception 

when  other*  => 

CLOSE (NODE) ; 

raise: 

end  DELETE  MODE: 


Notes: 

The  DELETE  _  NODE  operations  cannot  be  used  to  delete  more  than  one  primary  relation  node 
In  a  single  operation.  It  Is  left  to  an  Implementation  decision  whether  and  when  nodes  whose 
primary  relationships  have  been  broken  are  actually  removed.  However,  secondary  relationships 
to  such  nodes  must  remain  until  they  are  explicitly  deleted  using  the  UNLINK  procedures. 


5.1.2.22.  Deleting  the  primary  relationships  of  a  tree 

procedure  delete_tree  (mode  :  in  out  node_type)  ; 


Purpose: 

This  procedure  effectively  performs  the  DELETE_NODE  operation  for  a  specified  node  and 
recursively  applies  DELETE_TREE  to  ail  nodes  reachable  by  a  unique  primary  pathname  from 
the  designated  node.  The  nodes  whose  primary  relationships  are  to  be  deleted  are  opened  with 
Intent  EXCLUSIVE _ WRITE,  thus  locking  them  for  other  operations.  The  order  In  which  the 
deletions  of  primary  relationships  Is  performed  Is  not  specified.  If  the  DELETE_TREE 
operation  raises  an  exception,  none  of  the  primary  relationships  is  deleted. 

Parameters: 

NODE  is  an  open  node  handle  to  the  node  at  the  root  of  the  tree  whose  primary 

relationships  are  to  be  deleted. 


Exceptions: 

NAME  _  ERROR 

Is  raised  if  the  parent  node  of  the  node  identified  by  NODE  or  any  of  the  target 
nodes  of  primary  relationships  to  be  deleted  are  Inaccessible. 

USE_ERROR  is  raised  If  the  primary  relationship  to  the  node  Identified  by  NODE  belongs  to  a 
predefined  relation  that  cannot  be  modified  by  the  user. 

STATUS _ ERROR 

Is  raised  If  the  node  handle  NODE  Is  not  open  prior  to  the  call. 

LOCK  _  ERROR 

Is  raised  If  a  node  handle  to  the  parent  of  the  node  specified  by  NODE  cannot  be 
opened  with  Intent  WRITE_RELAT!ONSHIPS  or  If  a  node  handle  Identifying  any 
node  whose  unique  primary  path  traverses  the  node  Identified  by  NODE  cannot  be 
opened  with  Intent  EXCLUSIVE _ WRITE. 

INTENT  _  VIOLATION 

Is  raised  If  the  node  handle  NODE  was  not  opened  with  an  Intent  Including 
EXCLUSIVE_ WRITE  and  READ_RELATIONSHIPS. 
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raise; 

end  renait:; 

Notes; 

Open  node  handles  from  existing  processes  track  the  renamed  node. 


S. 1.2.21.  Deleting  the  primary  relationship  to  a  node 
procedure  DELETE  JUDE  (NODE:  in  out  aaDE_TYPE); 


Purpose: 

This  procedure  deletes  the  primary  relationship  to  a  node  Identified  by  NODE.  The  node 
becomes  unobtainable.  The  node  handle  NODE  Is  closed.  If  the  node  is  a  process  node  and  the 
process  is  not  yet  TERMINATED  (see  Section  5.2),  DELETE_NODE  aborts  the  process. 

Parameters: 

NODE  Is  an  open  node  handle  to  the  node  which  Is  the  target  of  the  primary  relationship 

to  be  deleted. 


Exceptions: 

NAME  __  ERROR 

is  raised  If  the  parent  node  of  the  node  Identified  by  NODE  is  Inaccessible. 
USE_ERROR  is  raised  if  any  primary  relationships  emanate  from  the  node. 

STATUS  _  ERROR 

is  raised  If  the  node  handle  NODE  Is  not  open  prior  to  the  call. 

LOCK  _  ERROR 

Is  raised  If  access.  With  Intent  WRITE_ RELATIONSHIPS,  to  the  parent  or  the 
node  to  be  deleted  cannot  be  obtained  due  to  an  existing  lock  on  the  node. 

INTENT  _  VIOLATION 

Is  raised  if  the  node  handle  NODE  was  not  opened  with  an  intent  Including 
EXCLUSIVE  _  WRITE  and  READ  _  RELATIONSHIPS. 

ACCESS  _  VIOLATIO  N 

Is  raised  If  the  current  process  does  not  have  sufficient  discretionary  access  control 
rights  to  obtain  access  to  the  parent  of  the  node  to  be  deleted  with  intent 
WR1TE_ RELATIONSHIPS  and  the  conditions  for  NAME_ ERROR  are  not 
present. 

SECURITY_  VIOLATION 

Is  raised  If  the  operation  represents  a  violation  of  mandatory  access  controls. 
SECURITY_VIOLATION  Is  raised  only  If  the  conditions  for  other  exceptions  are 
not  present. 

Additional  Interface: 

procedure  delete  rode  (hake:  in  make  stoimg) 

is 
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NEW  _  RELATION 

Is  a  relation  name  for  the  new  primary  relationship. 


Exceptions: 

NAME  _  ERROR 

is  raised  If  the  new  node  identification  is  Illegal  or  If  a  node  already  exists  with  the 
Identification  given  for  the  new  node. 

USE__  ERROR  Is  raised  If  the  node  Identified  by  NODE  Is  not  a  file  or  structural  node  or  If  the 
renaming  cannot  be  accomplished  while  still  maintaining  aclrcularlty  or  primary 
relationships  (e.g.,  If  the  new  parent  node  would  be  the  renamed  node). 
USE  _  ERROR  is  also  raised  If  NEW  _  RELATION  Is  the  name  of  a  predefined 
relation  that  cannot  be  modified  or  created  by  the  user  or  If  the  primary 
relationship  to  be  deleted  belongs  to  a  predefined  relation  that  cannot  be  modified 
by  the  user. 

STATUS  __  ERROR 

Is  raised  If  the  node  handles  NODE  and  NEW  _  BASE  are  not  open. 

LOCK  _  ERROR 

Is  raised  If  access,  with  Intent  WRITE_  RELATIONSHIPS,  to  the  parent  of  the 
node  to  be  deleted  cannot  be  obtained  due  to  an  existing  lock  on  the  node. 

INTENT_  VIOLATION 

Is  raised  if  NODE  was  not  opened  with  an  Intent  establishing  the  right  to  write 
relationships  or  If  NEW_BASE  was  not  opened  with  an  Intent  establishing  the 
right  to  append  relationships. 

ACCESS  _  VIOLATIO  N 

Is  raised  If  the  current  process  does  not  have  sufficient  discretionary  access  control 
rights  to  obtain  access  to  the  parent  of  the  node  to  be  renamed  with  Intent 
WR1TE_ RELATIONSHIPS  and  the  conditions  Tor  NAME_ ERROR  are  not 
present. 

SECUR  tTY  _  VIOLATIO  N 

is  raised  ir  the  operation  represents  a  violation  of  mandatory  access  controls. 
SECURITY_VIOLATION  is  raised  only  If  the  conditions  for  other  exceptions  are 
not  present. 


Additional  Interface: 

procedure  remame (rode .  in  rode_type; 

RE*_RARE:  in  RARE_STRIRC) 

is 

RER_BASE.  RODETYPE. 
begin 

OPER (HER  BASE.  BASE  PATH (HER  RARE).  (1=>APPEKD  RELATIONSHIPS) ) ; 
REKAHE  (RODE.  RE»_BAS£,  LA5T~ICEY (KE*_RAKE) , 

LAST  RELATION (RE*  RARE)); 

CLOSE (RE*_BASE); 
exception 

when  others  *> 

CLOSE  (RE»_BASE)  ; 


52 


PROPOSED  MIUSTIX  Ms 
31  JaMAR’i  I88A 


Parameters: 

NODE  Is  an  open  node  handle  to  a  node  the  value  of  whose  attribute  named  by 

ATTRIBUTE  is  to  be  set. 

ATTRIBUTE  Is  the  name  of  the  attribute. 

VALUE  Is  the  new  value  of  the  attribute. 

Exceptions: 

USE_ERROR  Is  raised  If  the  node  has  no  attribute  of  the  given  name.  USE_ERROR  Is  also 
raised  If  ATTRIBUTE  Is  the  name  of  a  predefined  node  attribute  which  cannot  be 
modified  by  the  user. 

STATUS_ ERROR 

Is  raised  if  NODE  is  not  an  open  node  handle. 


INTENT_  VIOLATION 

is  raised  If  NODE  was  not  opened  with  an  Intent  establishing  the  right  to  write 
attributes. 

SECURITY_  VIOLATION 

Is  raised  If  the  operation  represents  a  violation  of  mandatory  access  controls. 
SECURITY _  VIOLATION  Is  raised  only  If  the  conditions  for  other  exceptions  are 
not  present. 


Additional  Interface: 

procedure  setnode  attribute  (name  :  in  namestrihg; 

ATTRIBUTE:  in  ATTRIBUTE  NAME; 
VALUE:  in  LIST  TYPE) 

is 

NODE:  NODEJTYPE; 

begin 

OPEN  (NODE,  NAME.  (1=>VRITE_ATTRIBUTES)  )  ; 

SET  NODE  ATTRIBUTE  (NODE.  ATTRIBUTE.  VALUE); 

CLOSE (NODE) ; 

exception 

when  others  *> 

CLOSE (NODE) ; 
raise; 

end  set  node  attribute; 


6. 1.3.0.  Setting  path  attributes 


procedure  set_path  attribute  (base 

KEY 

RELATION  : 

ATTRIBUTE: 

VALUE 


:  in  N0DE_TYPE ; 
in  RELATI  0NSHIP_KEY ; 
in  RELATI 0N_NAXE 

:  *DEFAULT_RELATION ; 
in  ATTRIBUTE” NAME, 
in  LIST  TYPE)"; 


Purpose: 

This  procedure  sets  the  value  of  the  relationship  attribute  named  by  ATTRIHUTK  to  the  value 
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specified  by  VALUE.  The  relationship  Is  Identified  explicitly  by  the  base  node  BASE,  the 
relation  name  RELATION  and  the  relationship  key  KEY. 

Parameters: 

RASE  is  an  open  node  handle  to  the  node  from  which  the  relationship  emanates. 

KEY  Is  the  relationship  key  of  the  affected  relationship. 

RELATION  is  the  relation  name  of  the  affected  relationship. 

ATTRIBUTE  is  the  name  of  the  attribute. 

VALUE  Is  the  new  value  of  the  attribute. 


Exceptions: 

NAME_  ERROR 

Is  raised  If  the  relationship  Identified  by  the  BASE,  KEY  and  RELATION 
parameters  does  not  exist. 

USE_ERROR  Is  raised  If  the  node  does  not  have  an  attribute  of  the  given  name.  USE_ERROR 
la  also  raised  if  RELATION  Is  the  name  of  a  predefined  relation  that  cannot  be 
modified  by  the  user.  USE _  ERROR  is  also  raised  If  ATTRIBUTE  is  the  name  of  a 
predefined  relationship  attribute  which  cannot  be  modified  by  the  user. 

STATUS  _  ERROR 

Is  raised  If  the  node  handle  BASE  is  not  open. 

INTENT  _  VIOLATION 

Is  raised  If  BASE  was  not  opened  with  an  intent  establishing  the  right  to  write 
relationships. 

SECURITY  _  VIOLATION 

Is  raised  If  the  operation  represents  a  violation  of  mandatory  access  controls. 
SECURITY_VIOLATION  is  raised  only  If  the  conditions  for  other  exceptions  are 
not  present. 


Additional  Interface: 

procedure  set_pa™_attri0ute  (name  :  in  kakestring. 

ATTRIBUTE:  in  ATTRI BUTE _ NAME ; 
value:  in  usTjrrPE) 

la 

BASE:  BODEjrrFE; 
begin 

OPEN (BASE,  BASE  PATH (NAME) .  (1=> WRITE  RELATIONSHIPS)); 
SET_PATH_ATTR I BUTE (BASE .  LASTJCET (NAME) ,  LAST_RELATION (NAME) . 
ATTRIBUTE.” VALUE) ; 

CLOSE (BASE) ; 
exception 

when  others  => 

CLOSE (BASE) ; 
raise, 

end  SET_PATH_ ATTRIBUTE; 
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5. 1.3.7.  Getting  node  attributes 

procedure  GET_NC1DE_ATTRIBUTE  (MODE :  in  MDEJIYPE; 

ATTRIBUTE:  in  ATTRIBUTE_KAJtE . 

VALUE:  in  OUt  LISTTTPe") ; 

Purpose: 

This  procedure  returns  the  value  of  the  node  attribute  named  by  ATTRIBUTE  in  the  parameter 
VALUE.  The  node  is  Identified  by  open  node  handle  NODE. 

Parameters: 

NODE  Is  an  open  node  handle  to  a  node  the  value  of  whose  attribute  ATTRIBUTE  Is  to  be 

retrieved. 

ATTRIBUTE  Is  the  name  of  the  attribute. 

VALUE  Is  the  result  parameter  containing  the  value  of  the  attribute. 


Exceptions: 

USE_ERROR  Is  raised  If  the  node  has  no  attribute  of  name  ATTRIBUTE. 

STATUS_  ERROR 

Is  raised  If  NODE  is  not  an  open  node  handle. 

1NTENT_  VIOLATION 

Is  raised  If  NODE  was  not  opened  with  an  Intent  establishing  the  right  to  read 
attributes. 


Additional  Interface: 

procedure  get  NODeattribuTE  (name :  in  namestring, 

ATTRIBUTE:  in  ATTRIBUTENAME; 
VALUE:  in  out  LISTTYPE) 

is 

SODE:  NODETYPE; 
begin 

OPEJf (NODE,  NAME.  (1  =  >REAP_ATTRIBUTES>)  ; 

GET_NaDE_ATTRI BUTE (NODE,  ATTRIBUTE.  VALUE); 

CLoSe (NOSE) : 

exception 

when  others  => 

CLOSE (NODE) ; 

raise; 

end  GET  NODE  ATTRIBUTE; 


6.I.3.8.  Getting  path  attributes 


procedure  GET_PATH_ATTRIBUTE(BASE: 

KEY: 

RELATION: 

ATTRIBUTE: 

VALUE: 


in  NODEjnrpE; 

in  RELATIONSHIPJCEY; 

in  RELATION  NAME 

: =DEF AULT_RELATI ON ; 
in  ATTRIBUTE_NAME ; 

in  out  LISTJTYPE) ; 


Purpose: 
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This  procedure  assigns  the  value  of  the  relationship  attribute  named  by  ATTRIBUTE  to  the 
parameter  VALUE.  The  relationship  is  Identified  explicitly  by  the  base  node  BASE,  the  relation 
name  RELATION  and  the  relationship  key  KEY. 


Parameters: 


BASE 


KEY 

RELATION 

ATTRIBUTE 

VALUE 


Is  an  open  node  handle  to  the  node  from  which  the  relationship  emanates, 
is  the  relationship  key  of  the  accessed  relationship, 
is  the  relation  name  of  the  accessed  relationship. 

Is  the  name  of  the  attribute. 

Is  the  result  parameter  containing  the  value  of  the  attribute. 


Exceptions: 

NAME_  ERROR 

is  raised  if  the  relationship  Identified  by  the  BASE.  KEY  and  RELATION 
parameters  does  not  exist. 


USE_  ERROR  Is  raised  If  the  relationship  does  not  have  an  attribute  of  the  given  name. 

STATUS _ ERROR 

Is  raised  If  the  node  handle  BASE  Is  not  open. 

INTENT  _  VIOLATION 

Is  raised  If  BASE  was  not  opened  with  an  Intent  establishing  the  right  to  read 
relationships. 

Additional  Interface: 

procedure  getpathattribute  (name  in  name_string; 

ATTRIBUTE:  in  ATTRIBUTEJtAME . 

VALUE:  in  OUt  LIST  TYPE) 

la 

BASE:  NODE_TTPE; 
begin 

□PEN (BASE.  BASEPATH (NAME) .  (1=>R£AD  RELATIONSHIPS)) ; 

CET_PATH_ ATTRIBUTE (BASE.  LAST  JCET (NAME) ,  LAST  RELATION (NAME) , 

ATTRIBUTE,  VALUE); 

CLOSE (BASE), 
exception 

when  others  *> 

CLOSE (BASE) ; 

raise; 

end  GET  PATH  ATTRIBUTE; 
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5. 1.3.9.  Attribute  iteration  types  and  subtypes 

•Ubtype  ATTRIBUTENAME  la  STRING; 

type  ATTRIBUTTITERATOR  la  limited  private; 

•ubtype  ATTRIBUTE_PATTERN  ia  STRING; 

These  types  are  used  in  the  following  Interfaces  for  Iteration  over  a  set  of  attributes  of  nodes  or 
relationships.  ATTRIBUTE  _  NAME  Is  a  subtype  for  the  names  of  attributes.  An 

ATTRIBUTE_ PATTERN  has  the  same  syntax  as  an  ATTRIBUTE _ NAME,  except  that  will 

match  any  single  character  and  will  match  any  string  of  characters.  ATTRIBUTE_  ITERATOR  is 
a  private  type  assumed  to  contain  the  bookkeeping  Information  necessary  for  the  implementation  of 
the  MORE  and  GET _  NEXT  functions.  The  attributes  are  returned  by  GET _  NEXT  In  ASCII 
lexicographical  order  by  attribute  name.  The  effect  on  existing  Iterators  of  creation  or  deletion  of 
attributes  or  relationships  Is  Implementation-defined. 


6.1.3.10.  Creating  tn  iterator  over  node  attributes 


procedure  NODE_ATTRIBUTE_ITERATE  (ITERATOR : 

NODE: 


PATTERN: 


Purpose: 


out  ATTRIBUTE  riERATOR; 
in  NODETYPE  T 

in  ATTRI BUTEPATTERN 

:=**•); 


The  procedure  NODE_ATTRIBUTE_ ITERATE  returns  In  the  parameter  ITERATOR  an 
attribute  Iterator  according  to  the  semantic  rules  for  attribute  selection  given  In  Section  5. 1.3.0. 


Parameters: 

ITERATOR  is  the  attribute  iterator  returned. 

NODE  is  an  open  node  handle  to  a  node  over  whose  attributes  the  iterator  Is  to  be 

constructed. 

PATTERN  Is  a  pattern  for  attribute  names  as  lescrlbed  In  Section  5. 1. 3.9. 

Exceptions: 

USE_ERROR  Is  raised  If  the  PATTERN  Is  syntactically  Illegal. 

STATUS _ ERROR 

is  raised  if  NODE  is  not  an  open  node  handle. 

INTENT  _  VIOLATION 

is  raised  If  NODE  Is  not  open  with  an  Intent  establishing  the  right  to  read 
attributes. 


Additional  Interface: 


procedure  node  attribute  iterate  (iterator: 

RAKE: 


PATTERN : 


is 

NODE:  N0DE_TTPE; 
begin 


OUt  ATTRIBUTE_ITERATQR; 
in  NAMESTRING; 

in  ATTRIBl/TE_PATTERN 

:=*••) 
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OPEN (MODE.  RAME.  (1=>READ_ATTRIBUTES) ) ; 

MODE_ATTRXBUTE_ITERATE (ITERATOR ,  MODE.  PATTERM) . 

CLOSE (NODE) ; 
exception 

when  others  => 

CLOSE (MODE) ; 
raise; 

end  NODE_ATTRIBUTE_ITERATE; 

Notes: 

By  using  the  pattern  It  is  possible  to  Iterate  over  all  attributes  or  a  node. 

5.1.3.11.  Creating  an  iterator  over  relationship  attributes 

procedure  PATH_ATTRIBUTE_rTERATE  (ITERATOR :  out  ATTR I  BUTE_ ITERATOR ; 

BASE:  in  MODE_TYPE  ;~ 

KET:  in  MELATI OMSHI P_KEY ; 

RELATION :  in  RELATIOHNAmE 

: «DEFAULT_RELATIOM ; 

PATTERN:  in  ATTRIBUTE  PATTERN 

Purpose: 

This  procedure  Is  provided  to  obtain  an  attribute  Iterator  for  relationship  attributes.  The 
relationship  Is  Identified  explicitly  by  the  base  node  BASE,  the  relation  name  RELATION  and 
the  relationship  key  KITY.  The  procedure  returns  an  attribute  Iterator  In  ITERATOR  according 
to  the  semantic  rules  for  attribute  selection  applied  to  the  attributes  of  the  identified 
relationship.  This  Iterator  can  then  be  processed  by  means  of  the  MORE  and  GET_NEXT 
Interfaces. 

Parameters: 

ITERATOR  Is  the  attribute  Iterator  returned. 

BASE  Is  an  open  node  handle  to  the  node  from  which  the  relationship  emanates. 

KEY  Is  the  relationship  key  of  the  affected  relationship. 

RELATION  Is  the  relation  name  of  the  affected  relationship. 

PATTERN  Is  a  pattern  for  attribute  names  (see  Section  5.1.3.8). 

Exceptions: 

NAME  _  ERROR 

Is  raised  if  the  relationship  Identified  by  the  BASE.  KEY  and  RELATION 
parameters  does  not  exist. 

USE_ERROR  Is  raised  If  the  PATTERN  is  syntactically  illegal. 

STATUS _ ERROR 

Is  raised  If  BASE  Is  not  an  open  node  handle. 

I NTENT  _  VIOLATION 

Is  raised  If  BASE  was  not  opened  with  an  Intent  establishing  the  right  to  read 
relationships. 
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Additional  Interface: 

procedure  path_attribute_ITERATI:  [ iterator  :  out  attribute_iteratur  ; 

NAME :  in  MAMESTRING , 

PATTERN :  in  ATTRIBUTE_PATTERN 

ia 

BASE:  NODETYPE; 
begin 

OPEN (BASE ,  BASEPATH (NAME) ,  (1=>READ_RELATI0NSHIPS)  )  ; 

PATH  ATTRIBUTE  ITERATE (ITERATOR .  BASE.  LAST  KEY (MANE). 

LASTJtELATION (NAME) . “PATTERN) ; 

CLOSE (BASE); 
exception 

when  other*  => 

CLOSE (BASE); 
raiae; 

end  PATH  ATTRIBUTE  ITERATE: 


5.1.3.12.  Determining  iteration  status 

function  MORE  (ITERATOR :  in  ATTRIBUTE_ITERATQR) 
return  boolean; 


Purpose: 

The  function  MORE  returns  FALSE  If  all  attributes  contained  in  the  attribute  Iterator  have 
been  retrieved  with  the  procedure  GET_NEXT;  otherwise,  It  returns  TRUE. 

Parameters: 

ITERATOR  Is  an  attribute  Iterator  previously  constructed. 


Exceptions: 

USE _ ERROR  Is  raised  If  the  ITERATOR  has  not  been  previously  set  by  the  procedures 
NODE_  ATTRIBUTE,,  ITERATE  or  PATH_  ATTRIBUTE,, ITERATE. 

5.1.3.13.  Getting  the  next  attribute 


procedure  cet  mext ( iterator :  in  out  attribute_iteratdr : 

ATTRIBUTE.  out  ATTRIBUTENANE ; 

VALUE:  in  out  LIST_TYPE)  ~ 

Purpose: 

The  procedure  GET_NEXT  returns.  In  Its  parameters  ATTRIBUTE  and  VALUE,  both  the 
name  and  the  value  of  the  next  attribute  In  the  iterator. 

Parameters: 

ITERATOR  Is  an  attribute  Iterator  previously  constructed. 

ATTRIBUTE  Is  a  result  parameter  containing  the  name  of  an  attribute. 

VALUE  Is  a  result  parameter  containing  the  value  of  the  attribute  named  by  ATTRIBUTE. 

Exceptions: 

USE_  ERROR  Is  raised  If  the  ITERATOR  has  not  been  previously  set  by  the  procedures 
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NODE_ATTRIBUTE_ ITERATE  or  PATH  _ ATTRIBUTE _ ITERATE  or  If  the 
Iterator  is  exhausted,  l.e..  MORE(!TERATOR)=  FALSE. 

5.1.4.  Package  ACCESS— CONTROL 

This  package  provides  primitives  for  manipulating  discretionary  access  control  Information  for  CAJS 
nodes.  In  addition,  certain  CAIS  subprograms  declared  elsewhere  allow  the  specification  of  Initial 
access  control  Information.  The  CAJS  specifies  mechanisms  for  discretionary  and  mandatory  access 
control  (see  (TCSEC1).  These  mechanisms  are  only  recommendations.  Alternate  discretionary  or 
mandatory  access  control  mechanisms  can  be  substituted  by  an  Implementation  provided  that  the 
semantics  of  all  Interfaces  In  Section  5  (with  the  exception  of  Section  5.1. 4)  are  implemented  as 
specified. 


6.I.4.I.  Subtypes 

subtype  graxtvalue  is  cais  .  LisTjmLrriEs . ust_ttpe , 

GRANT_VALUE  Is  a  subtype  for  values  of  GRANT  attributes;  It  is  a  list  in  the  syntax  described  in 
Table  H. 


5. 1.4.2.  Setting  accegg  control 


procedure  set  access  control  (rode  .  in  ■odejiype; 

R0LE_BQDE:  in  BODEjrTPE; 
GRANT:  In  GRAJfT  VALUE)  ; 


Purpose: 


This  procedure  sets  access  control  Information  for  a  given  node.  If  a  relationship  of  the 
predefined  relation  ACCESS  does  not  exist  from  the  node  Identified  by  NODE  to  the  node 
identified  by  RGLE_NODE.  such  a  relationship  with  an  implementation-denned  relationship 
key  is  created  from  the  node  specified  by  NODE  to  the  node  specified  by  ROLE_NODE.  ir 
necessary,  the  predefined  attribute  GRANT  is  created  on  this  relationship  The  value  or  the 
GRANT  attribute  Is  set  to  the  value  of  the  GRANT  parameter  (see  Table  II  for  the  syntax). 
The  effect  is  to  grant  the  access  specified  by  GRANT  to  processes  that  have  adopted  the  role 
ROLE  NODE. 


Parameters: 

NODE  Is  an  open  node  handle  to  the  node  whose  access  control  Information  is  to  be  set. 


ROLE_NODE 

Is  an  open  node  handle  to  the  node  representing  the  role. 
GRANT  Is  a  list  describing  what  access  rights  can  be  granted. 


Exceptions: 

USE_ERROR  Is  raised  if  GRANT  Is  not  In  valid  syntax. 

STATUS _ ERROR 

Is  raised  If  NODE  and  ROLE_NODE  are  not  both  open  node  handles. 
INTENT  _  VIOLATION 

Is  raised  if  NODE  was  not  opened  with  Intent  CONTROL. 
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SECURITY_VIOL.\TION 

is  raised  if  the  operation  represents  a  violation  of  mandatory  access  controls. 
SECURITY_ VIOLATION  is  raised  only  If  the  conditions  for  other  exceptions  are 
not  present. 


Additional  Interface: 

procedure  SETjtccEssjaNTROL (hake  :  In  rame_etring; 

ROLEJtAME:  in  RAJ<E~STRING : 
GRANT:  in  GRAJ»T_VALUE) 

is 

■ODE,  MILE  HOPE:  MODE  TYPE; 
begin 

OPENCNCJDE,  HAKE.  (1=>C0NTR0L) ) ; 

OPEN (ROLE_NODE ,  ROLE  NAME.  (1=>EX3STENCE) ) ; 

SET  ACCESS  CONTROL (NODE.  ROLE_NODE.  GRANT); 

CLOSE  (NODE)' ; 

CLOSE (ROLE_NODE) ; 

exception 

when  others  => 

CLOSE  (NODE)  ; 

CLOSE (ROLE_NODE); 

raise; 

end  set  access  control; 


5.I.4.3.  Examining  acceaa  right* 

function  is_grantedcobject_node  :  in  bodetype; 

ACCESSRIGHt:  in  MAMESTRING) 
return  boolean; 

Purpose: 

This  function  returns  TRUE  If  the  current  process  as  a  subject  has  an  approved  access  right 
ACCESS_ RIGHT  to  the  OBJECT _  NODE  as  an  object.  Otherwise  It  returns  FALSE. 

Parameters: 

OBJECT  _  NODE 

is  an  open  node  handle  to  the  object  node. 


ACCESS  _  RIGHT 

Is  the  name  of  a  predefined  or  user-defined  access  right. 


Exceptions: 

USE _ ERROR  is  raised  If  ACCESS _RIGHT  Is  not  a  valid  Ada  identifier. 

STATUS _ ERROR 

is  raised  If  OBJECT_NODE  Is  not  an  open  node  handle. 

INTENT_  VIOLATION 

Is  raised  if  OBJECT_NODE  was  not  opened  with  an  intent  establishing  the  right 
to  read  relationships  or  to  read  access  control  Information. 


Additional  Interface: 
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function  IS_GRANTED (OBJECTNAME :  in  HANE_STRING; 

ACCESSRIGHT  in  NAJ(i_STRING) 

return  boolean 

b 

OBJECTNCDE:  N0DE_TYPE; 

RESULT:  BOOLEAN: 

begin 

OPEN  (QBJECT_NODE .  OBJECTNAME.  (1  =  >READ_RELATI0NSHIPS)  )  ; 
RESULT  :  =  IS  GRANTS) (OBJECT  NODE.  ACCESS  RIGHT) : 

CLOSE (OBJECT” NODE) ; 
return  result: 

exception 

when  other*  *> 

CLOSE  (OBJECTJKJDE)  ; 

raise. 

end  IS  GRANTED; 


5.I.4.4.  Adopting  a  role 

procedure  adopt (role_node:  In  node  TYPE; 

ROLE  KEY:  in  RELATIONSHIP  KEY : ^LATEST  KEY): 


Purpose: 

This  procedure  causes  the  current  process  to  adopt  the  group  specified  by  the  ROLE _  NODE.  A 
relationship  of  the  predefined  relation  ADOPTED_ROLE  with  relationship  key  ROLE_KEY  is 
created  from  the  calling  process  node  to  the  node  Identified  by  ROLE_NODE.  In  order  for  the 
current  process  to  adopt  the  group,  a  node  representing  some  other  adopted  role  or  the  current 
process  must  be  a  potential  member  of  the  group  to  be  adopted. 

Parameters: 

ROLE  _  NODE 

Is  an  open  node  handle  to  a  node  representing  the  group. 

ROLE_KEY  Is  a  relationship  key  to  be  used  in  creating  the  relationship. 

Exceptions: 

USE_ERROR  Is  raised  If  there  is  no  adopted  role  of  the  current  process  that  Is  a  potential 
member  of  the  group  represented  by  ROLE_NODE  or  If  there  already  exists  a 
relationship  of  the  predefined  relation  ADOPTED_ROLE  with  relationship  key 
ROLE_KEY  emanating  from  the  current  process  node.  USE_ERROR  Is  also 
raised  If  the  node  Identified  by  ROLE_NODE  is  inaccessible  or  unobtainable. 

STATUS _ ERROR 

is  raised  If  ROLE_NODE  Is  not  an  open  node  handle. 

LOCK  _  ERROR 

Is  raised  If  access  with  Intent  APPEND _ RELATIONSHIPS  to  the  current  process 
node  cannot  be  obtained  due  to  an  existing  lock  on  the  node. 

SECURITY  _  VIOLATION 

Is  raised  If  the  operation  represents  a  violation  of  mandatory  access  controls. 
SECURITY  _ VIOLATION  Is  raised  only  If  the  conditions  for  other  exceptions  are 
not  present. 
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5. 1.4.5.  Unlinking  an  adopted  role 

procedure  ukadoptcROLE_key  :  In  RELATioirsniP_KEr) ; 


Purpose: 

This  procedure  deletes  the  relationship  of  the  predefined  relation  ADOPTED _ ROLE  with 
relationship  key  ROLE_KEY  emanating  from  the  current  process  n o>lc.  If  there  Is  no  such 
relationship,  the  procedure  has  no  effect. 

Parameters: 

ROLE  _  KEY  Is  the  relationship  key  of  the  relation  ADOPTED  _  ROLE 
Exception: 

USE_ ERROR  Is  raised  If  the  target  node  of  the  relationship  to  be  deleted  is  the  top-level  node 
Identified  by  " ’CURRENT _ USER".  In  this  case  the  relationship  Is  not  deleted. 

LOCK  _  ERROR 

Is  raised  If  access,  with  intent  WRITE_RELATIONSHIPS.  to  the  current  process 
node  cannot  be  obtained  due  to  an  existing  lock  on  the  node. 


5.1.5.  Package  STRUCTURAL _ NODES 

Structural  nodes  are  special  nodes  In  the  sense  that  they  do  not  have  contents  as  the  other  nodes  of 
the  CAIS  model  do.  Their  purpose  Is  solely  to  be  carriers  of  common  information  about  other  nodes 
related  to  the  structural  node.  Structural  nodes  are  typically  used  to  create  conventional  directories, 
configuration  objects,  etc.. 


The  package  STRUCTURAL_NODES  defines  the  primitive  operations  for  creating  structural  nodes. 


5.I.5.I.  Creating  structural  nodes 

procedure  create jkjde  (HOPE:  In  out  nodettpe; 


BASE: 

in 

NODE  TYPE: 

KEY: 

in 

RELATIONSHIP  KEY 

: * LATEST  KEY; 

RELATION: 

In 

RELATION  NAME 

: “DEFAULT  RELATION; 

ATTRIBUTES : 

in 

LIST_TYPE  :=  EMPTY_LIST ; 

ACCESS_CO NTROL : 

in 

LIST_TYPE  :=  EMPTYLIST; 

LEVEL: 

in  LIST  TYPE  :=  EMPTY  LIST) 

Purpose: 

This  procedure  creates  a  structural  node  and  installs  the  primary  relationship  to  it.  The  relation 
name  and  relationship  key  of  the  primary  relationship  to  the  node  and  the  base  node  from  which 
It  emanates  are  given  by  the  parameters  RELATION,  KEY,  and  BASE.  An  open  node  handle 
to  the  newly  creat'  d  node  with  WRITE  Intent  Is  returned  In  NODE. 


The  ATTRIBUTES  parameter  defines  and  provides  Initial  values  ror  attributes  of  the  node.  The 
ACCESS  _CONTROL  parameter  specifics  Initial  access  control  Info  nation  to  be  established  for 
the  created  node  ( <ee  Section  4.4). 


The  LEVEL  parameter  specifies  the  security  level  at  which  the  node  Is  to  be  crealed. 
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Parameters: 

NODE  to  a  nod<-  handle,  Initially  closed,  to  be  opened  to  the  newly  created  node, 

BASE  to  an  op<-n  node  handle  to  the  node  from  which  the  primary  relationship  to  the  new 

node  Is  to  emanate. 

KEY  to  the  relationship  key  of  the  primary  relationship  to  be  created. 

RELATION  to  the  relation  name  of  the  primary  relationship  to  be  created. 

ATTRIBUTES  Is  a  named  list  (see  Section  5.4)  whose  elements  are  used  to  establish  Initial  values 
for  attributes  of  the  newly  created  node;  each  named  item  specifies  an  attribute 
name  and  the  value  to  be  given  to  that  attribute. 

ACCESS  _CONTROL 

Is  the  Initial  access  control  Information  associated  with  the  created  node.  It  is  a 
named  list  (see  Section  5.4)  each  of  whose  named  Items  specifies  a  relationship  key 
followed  by  a  list  of  access  rights. 

LEVEL  Is  the  classification  label  for  the  created  node  (see  TABLE  IV). 


Exceptions: 

NAME_  ERROR 

Is  raised  If  a  node  already  exists  for  the  node  identification  given,  ir  the  node 
identification  Is  Illegal,  or  If  any  node  Identifying  a  group  specified  in  the  given 
ACCESS_CONTROL  parameter  is  unobtainable  or  Inaccessible. 

USE_  ERROR  is  raised  if  the  ACCESS _ CONTROL  or  LEVEL  parameters  do  not  adhere  to  the 
required  syntax  or  If  the  ATTRIBUTES  parameter  contains  references  to  predenned 
attributes  which  cannot  be  modified  or  created  by  the  user.  USE_ ERROR  Is  also 
raised  If  RELATION  to  the  name  of  a  predefined  relation  that  cannot  be  modined 
or  created  by  the  user. 

STATUS _ERROR 

to  raised  If  BASE  Is  not  an  open  node  handle  or  If  NODE  is  an  open  node  handle 
prior  to  the  call. 

INTENT_  VIOLATION 

to  raised  If  BASE  was  not  opened  with  an  Intent  establishing  the  right  to  append 
re.atlonshlps. 

SECURITY_  VIOLATION 

to  raised  If  the  operation  represents  a  violation  of  mandatory  access  controls. 
SECURITY_  VIOLATION  Is  raised  only  If  the  conditions  for  other  exceptions  are 
not  present. 


Additional  Interfaces: 

procedure  cjulate_node  (node  : 

NAME: 


In  out  NODE  TTPE; 
in  NAME  "STRING; 
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i » 

BASE.  MODE  TYPE; 


ATTRIBUTES  in  LISTJTTPE  :■  EMPTY_LIST ; 
ACCESSCDRTRCL  in  LIST~TYPE  :*  EXPTY_LIST. 
LEVEL:"  in  LIST~TYPE  :»  EMPTY  LIST) 


begin 

OPEN  (BASE.  BASE  PATH (KAME)  ,  (1»>APPEND  RELATIONSHIPS) )  ; 
CREATE  NODE  (BODE .  BASE.  LAST  JCET  CHASE)  7  LAST_RELATIQN  (HAME)  . 
ATTRIBUTES,  ACCESS  CONTROL,  LEVEL): 

CLOSE (BASE) : 
exception 

when  others  *> 

CLOSE (MODE) ; 

CLOSE (BASE) : 


end  CREATE  MODE: 


procedure  CREAte_node  (base  : 

KEY: 

BELATIOH: 

ATTRIBUTES: 
ACCESS_COHTROL : 
LEVEL:" 

is 


in  HODE_TYPE; 
in  RELATI  OHSKIP_KEY 
: "LATEST  KEY; 
in  RELATION  JUNE 
: *DEFAULT_RELATI OH : 
in  USTJTYPE  :«  EMPTY  JUST 
in  LIST~TYPE  :«  EHPTT~LIST 
in  LIST~TTPE  :»  EHPTY~LIST 


BODE:  RODE  TYPE; 
begin 

CREATERODE (RODE . KEY , RELATIOH .ATTRIBUTES . ACCESS_COHTROL . LEVEL) ; 
CLOSE (HODE); 
end  CREATE  RODE; 


procedure  createrode  (HARE:  in  hare  STRING: 

ATTRIBUTES:  in  USTJIYPE  :«  EHPTY_LIST ; 

ACCESS  CONTROL:  in  LIST~TYPE  :*  EMPTY~LIST; 

LEVEL:"  in  USt"tYPE  :*  EHPTy“lIST)  ; 

is 

RODE:  HODE_TTPE; 
begin 

CREATE_HODE (RODE .  HARE.  ATTRIBUTES.  ACCESSCORTROL .  LEVEL): 

CLOSE  (RODE)  ; 
end  CREATE  RODE; 

Notes: 

Use  of  the  sequence  of  a  CREATE_NODE  call  that  does  not  return  an  open  node  handle 
followed  by  a  call  on  OPEN  for  the  created  node,  using  the  node  Identification  of  the  created 
node,  cannot  guarantee  that  a  handle  to  the  node  just  created  Is  opened;  this  is  because 
relationships,  and  therefore  the  node  Identification,  may  have  changed  since  the 
CREATE  NODE  call. 


5.2.  CA1S  process  nodes 

This  section  describes  the  semantics  of  the  execution  of  Ada  pmcams  as  represented  by  CAiS 
processes  and  the  facilities  provided  by  the  CAIS  for  Initiating  and  <■<  ntrolling  processes.  The  major 
stages  In  a  process'  life  are  Initiation,  running  (which  may  Include  -  ispension  or  resumption),  and 
termination  or  abortion.  The  CAIS  defines  facilities  to  ronirnl  rid  coordinate  the  initiation, 
suspension,  resumption,  and  termination  r  abortion  of  processes  '  >e  Section  4. .1.2).  Each  CAIS 
process  has  a  current  status  associated  »  h  it  which  changes  wit1'  ■  >-rtaln  events  as  specified  in 
TABLE  VI. 
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A  process  Is  said  to  be  terminated  when  Its  main  program  (In  the  sense  of  [LRM]  10.1)  has  terminated 
(In  the  sense  of  [LRM]  9.1).  See  also  the  notes  In  [LRM]  0.4.  Thus,  termination  of  a  process  takes 
place  when  the  main  program  has  been  completed  and  all  tasks  dependent  on  the  main  program  have 
terminated.  A  process  may  be  aborted  either  by  Itself  or  by  another  process.  When  a  process  has 
terminated  or  has  been  aborted,  all  of  Its  dependent  processes  which  have  not  already  terminated  or 
been  aborted  will  be  aborted  but  Its  process  node  remains  until  explicitly  deleted.  Any  open  node 
handles  of  a  process  are  closed  when  the  process  terminates  or  la  aborted. 

Two  mechanisms  for  a  process  to  Initiate  another  process  are  provided: 

a.  Spawn  -  the  procedure  SPAWN_PROCESS  returns  after  Initiating  tne  specified  program. 

The  Initiating  process  and  the  Initiated  process  run  In  parallel,  and,  within  each  of  them, 
their  tasks  may  execute  In  parallel. 

b.  Invoke  -  the  procedure  INVOKE_  PROCESS  returns  control  to  the  calling  task  after  the 
Initiated  process  has  terminated  or  aborted.  Execution  of  the  calling  task  Is  blocked  until 
termination  or  abortion  of  the  Initiated  process,  but  other  tasks  in  the  initiating  process 
may  execute  In  parallel  with  the  Initiated  process  and  Its  tasks. 

Every  process  node  has  several  predefined  attributes.  Three  of  these  are:  RESULTS,  which  can  be 
used  to  store  user-defined  strings  giving  Intermediate  results  of  the  process:  PARAMETERS,  which 
contains  the  parameters  with  which  the  process  was  initiated:  and  CURRENT_STATUS,  which  gives 
the  current  status  of  the  process  (see  TABLE  VI).  In  addition,  every  process  node  has  several 
predefined  attributes  which  provide  information  for  standardized  debugging  and  performance 
measurement  of  processes  within  the  CAJS  Implementation.  One  or  these  predefined  attributes, 
HANDLES _  OPEN,  has  an  Implementation-Independent  value  which  gives  the  number  of  node 
handles  the  process  currently  has  open.  The  remaining  predefined  attributes  have  Implementation- 
dependent  values  and  should  not  be  used  for  comparison  with  values  from  other  CAJS 
Implementations.  START_TIME  and  FIN1SH_TIME  give  the  time  or  activation  and  the  time  of 
termination  or  abortion  of  the  process.  MACHINE_TIME  gives  the  length  of  time  the  process  was 
active  on  the  logical  processor.  If  the  process  has  terminated  or  aborted,  or  zero.  If  the  process  has  not 
terminated  or  aborted  1»J_  UNITS  gives  the  number  of  GET  and  PUT  operations  that  have  been 
performed  by  the  process.  The  CURRENT_  STATUS,  HANDLES  _  OPEN,  START  _  TIME, 
FINISH_TIME.  MACHINE_TIME,  and  IO_UNITS  predefined  attributes  are  maintained  by  the 
Implementation  and  cannot  be  set  using  CA1S  Interfaces. 

When  a  process  has  terminated  or  aborted,  the  final  status,  recorded  In  the  predefined  process  node 
attribute  CURRENT_STATUS,  will  persist  as  long  as  the  process  node  exists. 
CURRENT_STATUS  may  also  be  examined  by  the  CAIS  procedures  STATUS_OF_PROCESS 
and  GET _  RESULTS.  The  process  status  of  a  process  will  be  returned  to  any  task  awaiting  the 
termination  or  abortion  of  the  process  whenever  the  process  Is  terminated  or  aborted.  If  the  process 
has  already  been  terminated  or  aborted  at  the  time  a  call  to  AWAJT_PROCESS_COMPLETION  Is 
made,  then  the  final  s'.alus  Is  Immediately  available. 

For  purposes  of  Input  and  output,  every  process  node  has  one  relationship  of  each  of  the  following 
predefined  relations:  STANDARD  _  INPUT.  STANDARD  _  OUTPUT,  STANDARD_  ERROR, 

CURRENT _  INPUT,  CURRENT _  OUTPUT,  and  CURRENT _  ERROR.  STANDARD _  INPUT, 
STANDARD _ OUTPUT  and  STANDARD _  ERROR  are  relation  names  of  relationships  established 
at  Job  creation  to  the  default  input,  output  and  error  nics,  respectively.  The  STANDARD _ INPUT 
and  STANDARD _ OUTPUT  files  conform  to  the  semantics  given  for  these  In  [LRM]  M.3.2. 
CLURENT _ INPUT,  CURR ENT _ OUTPUT  and  CURRENT _ ERROR  are  relation  names  of 
relationships  established  by  a  process  to  alternative  files  to  be  used  as  the  default  Input,  output  and 
error  files,  respectively.  CURRENT  INPUT  and  CURRENT _  OUTPUT  also  conform  to  the 
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semantics  of  [LRMJ  H.3.2.  Interfaces  are  provided  in  the  CAIS  input  and  output  packages  (sec 
Section  5.3)  to  read  relationships  of  these  predefined  relations  and  to  change  the  relationships  of  the 
relations  CURRENT  INPUT,  CURRENT  OUTPUT,  and  CURRENT _  ERROR. 


Table  VI.  Process  status  transition  tabic 


1  0t&tB0 : 

1  •▼•nt 

non_sxistsnt 

READY  1 
1 

SUSPENDED 

1  ABORTED 

1 

1 

TERMINATED 

1  procaaa 

READY 

N/A  1 

N/A 

I  N/A 

1 

N/A 

1  creation 

1 

1 

1  terslnetlon 

TERM-  1 

N/A 

t  N/A 

1 

N/A 

1  of  sain 

N/A 

I  MATED  1 

1 

1  prograa 

1 

I 

1  ABORT 

M/A 

ABOR-  1 

ABORTED 

1  - 

1 

— 

1  PROCESS 

TED  1 

1 

1  SUSPEND 

M/A 

SUS-  1 

— 

1  - 

1 

— 

1  PROCESS 

PENDED  1 

1 

1  RESUME 

M/A 

-  1 

READY 

1  - 

1 

- - 

1  PROCESS 

1 

1 

N/A:  aarka  (Tints  that  are  not  applicable  to  the  statu# 
specified. 

— :  aarks  events  that  have  no  effect  on  the  status. 


npper  cass:  status  vhlch  are  values  of  the  enuaeratlon  type 

PROCESS_STATUS  (eg..  READY)  and  for  events  which 
are  caused  by  calling  CAIS  interfaces  (e.g.. 
ABORTPROCESS) . 

lover  case:  other  status  (l.e..  non-existent)  and  other  events 
(e.g.,  terslnetlon  of  the  Bain  prograa) . 


5.2.1.  Package  PROCESS— DEFINITIONS 
This  package  defines  the  types  and  exceptions  associated  with  process  nodes, 
type  process_status  Is 

(READY.  SUSPENDED.  ABORTED,  TERMINATED) ; 


An  object  of  type  PHOCESS_STATUS  is  the  sta'us  of  a  process. 

subtype  RESUl.TS_l.IST  is  CAIS  list  utilities  list_type, 

subtype  results’strinc  is  string; 

subtype  parameter_ust  is  cais  list_utilities . list_type; 

An  object  of  type  RESU1.TR_I.IST  is  a  list  of  results  from  a  process.  The  elements  of  this  list  are  of 
type  RESULTS_STRING.  An  object  of  type  PARAMETER __ LIST  Is  a  list  containing  process 
parameter  Information. 
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ROOT_PROCESS 

CURRlNT_INFUT 

CURRENTJJUTPUT 

CURRERTERRQR 


constant  hane_strirg 
constant  mane^strirg 
constant  make'strxng 
constant  haxe'strxng 


*  •cuRREJrr_jaB- : 

■  ‘  CURRERT~IKPUT* ; 

*  ■  CURRERT~OUTFUT* ; 

*  •C^*REJ^•-ERR£«■ ; 


ROOT _ PROCESS  Is  s  standard  pathname  for  the  root  process  node  of  the  current  Job. 
CURRENT _ INPUT,  CURRENT _ OUTPUT  and  CUI!RENT_ERROR  are  standard  pathnames  for 
the  current  process'  Input,  output  and  error  flies,  respectively. 


6.2.2.  Package  PROCESS  CONTROL 

This  package  specifies  Interfaces  for  the  creation  and  termination  of  processes  and  examination  and 
modification  of  process  node  attributes. 


As  part  of  the  creation  of  process  nodes,  new  secondary  relationships  are  built  as  described  in  TABLE 
VII 


Table  VU.  Created  and  Inhibited  relationships 


A  secondary  relationship  la  created  to  the  nods 

of  tha  predefined  relation:  Identified  by: 


CURRENTIRPUT 

CURRENT  OUTPUT 

CURREXTERROR 

ADOPTED~ROLE 

CURRERTRODE 

PARENT 


the  interface  par  natter  INPUTFILE 
the  interface  paraaetar  OUTPUT_FILE 
the  interface  paraaetar  ERRORFILE 
the  interface  paraaetar  FILENODE 
the  interface  paraaetar  ERVIROXMENTRODE 
the  predefined  constant  CURRENT_PROCESS 
(for  dependent  process  nodes) 
tha  predefined  constant  CURRENT_USER 
(for  root  process  nodes) 


The  created  proceee  node  inherits  all  secondary  relationships 
of  the  following  predefined  relations  froa  the  creating  process 
node: 


CURRENT _USER 
USER 

ALLOT  ACCESS 
DEVICE 

STARDARD_1NPUT 
STANDARD~OUTPUT 
STANDARDERROR 
ADOPTED  ROLE  [1] 
CURRENT~JOB  (21 


1.  For  CREATE_JOR,  only  the  relationship  of  the  predefined  relation  ADOI>TED_ROI,E 
with  the  CURRENT_USKR  as  target  Is  Inherited  from  the  creating  process  node. 

2.  For  CREATE_JOB,  a  relationship  or  the  predefined  relation  CURRENT_JOB  Is  created 
with  the  new  node  as  both  source  and  target  Instead  of  being  Inherited  from  the  creating 
process  node. 
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5. 2. 2.1.  Spawning  a  process 
procedure  SPAm  process 


(NODE: 

In  out  NODE  TYPE; 

FILE  JK2DE : 

in 

RODE  TYPE: 

IKPUT_PARAMETERS : 

in 

PARAKETER_LIST : *EMPTY_LIST; 

KEY. 

in 

RELATIONSHIP  JCEY  :*  LATEST JCEY : 

RELATION: 

in 

RELATION  NAME  :=  DEF AJULT_RELATION ; 

ACCESS  CONTROL: 

in 

LIST_TTPi  :«  EMPTY_LIST ; ~ 

LEVEL:” 

in 

LIST^TYPE  :«  EMPTY-LIST; 

ATTRIBUTES: 

in 

USTJYPE  :■  EMPTT_LIST; 

INFVT_FILE: 

in 

HAME-STRING  :«  CURRENTINPUT; 

OUTPUT_FIL£ : 

in 

NAMESTRING  :«  CURRENT jxrm/T; 

ERROR  FILE : 

in 

HAME~STRINC  :=  CURRENT ~ERROR . 

ENVIRONMENT  NODE: 

in 

NAME  "string  :  =  CURRENT  NODE)  ; 

Purpose: 

Tbis  procedure  creates  a  new  process  node  whose  contents  represent  the  execution  of  the 
program  contained  In  the  specified  file  node.  Control  returns  to  the  calling  task  after  the  new 
node  Is  created.  The  process  node  containing  the  calling  task  must  have  execution  lights  for  the 
file  node.  An  open  node  handle  NODE  on  the  new  node  Is  returned,  with  an  intent  (1  =  > 
READ _ ATTRIBUTES).  The  new  process,  as  a  subject,  has  all  discretionary  access  rights  to  Its 
own  process  node  (the  object).  When  the  parent  process  terminates  or  aborts,  the  child  process 
will  be  aborted. 

Secondary  relationships  emanating  from  the  new  process  node  are  created  and  Inherited  as 
described  In  TABLE  VII. 

The  ACCESS  _  CONTROL  parameter  specifies  the  Initial  access  control  Information  to  be 
established  for  the  created  node.  If  the  CAIS  models  of  discretionary  and  mandatory  access 
control  are  used,  then,  in  addition  to  the  relationships  established  using  the  Information  In  the 
ACCESS __  CONTROL  parameter,  an  access  relationship  Is  established  from  the  created  process 
node  to  the  current  user  node,  with  a  GRANT  attribute  value  ((READ,  WRITE,  CONTROL)). 

The  LEVEL  parameter  specifies  the  security  level  at  which  the  node  Is  to  be  created. 

Parameters: 

NODE  Is  a  node  handle  returned  open  on  the  newly  created  process  node. 

FILE_NODE  Is  an  open  node  handle  on  the  file  node  containing  the  executable  image  whose 
execution  will  be  represented  by  the  new  process. 

INPUT  PARAMETERS 


KEY 


REI.ATION 


Is  a  list  containing  process  parameter  Information.  The  list  Is  constructed  and 
parsed  using  the  tools  provided  In  CAIS.LIST_ UTILITIES  (see  Section  5.i).  The 
value  of  INPUT_  PARAMETERS  Is  stored  In  a  predefined  attribute 
PARAMETERS  of  the  new  node. 

is  the  relationship  key  of  the  primary  relationship  from  the  current  process  node  to 
the  new  process  node.  The  default  Is  supplied  by  the  mechanism  of  interpreting  the 
LA  TEST  _  KEY  constant. 

Is  the  relation  name  of  the  primary  relationship  from  the  current  process  node  to 
the  new  process  node.  The  default  Is  DEFAULT  RELATION. 
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ACCESS_CONTROL 

Is  a  string  defining  the  Initial  access  control  Information  associated  with  the  created 
node. 

LEVEL  Is  a  string  defining  the  classification  label  for  the  created  node  (see  TABLE  IV). 

ATTRIBUTES  Is  a  list  which  can  be  used  to  set  attributes  of  the  new  node.  It  could  be  used  by  an 
Implementation  to  establish  allocation  of  resources. 

INPUT  _  FILE,  OUTPUT  _  FILE,  ERROR  _  FILE 
are  pathnames  to  file  nodes. 

ENVIRONMENT  _  NODE 

Is  the  node  the  new  process  will  have  as  Its  Initial  current  node.  The  default  value 
Is  the  CURRENT_NODE  of  the  Initiating  process. 


Exceptions: 

NAME_ERROR 

Is  raised  If  a  node  already  exists  for  the  relationship  specified  by  KEY  and 
RELATION.  NAME_ ERROR  Is  also  raised  if  any  or  the  nodes  Identified  by 
INPUT _ FILE,  OUTPUT_FILE,  ERROR _ FILE,  or  ENVIRONMENT _ NODE  do 
not  exist.  It  Is  also  raised  If  KEY  or  RELATION  is  syntactically  Illegal  or  if  any 
node  identifying  a  group  specified  In  the  given  ACCESS _ CONTROL  parameter  Is 
unobtainable  or  Inaccessible. 

USE _  ERROR  Is  raised  If  it  can  be  determined  that  the  node  Indicated  by  FILE_NODE  does  not 
contain  an  executable  Image.  USE_ERROR  Is  also  raised  If  any  of  the  parameters 
INPUT _ PARAMETERS,  LEVEL?  ACCESS _  CONTROL,  or  ATTRIBUTES  Is 
syntactically  or  semantically  Illegal.  USE_ ERROR  Is  also  raised  If  RELATION  is 
the  name  of  a  predefined  relation  or  If  the  ATTRIBUTES  parameter  contains 
references  to  a  predefined  attribute  which  cannot  be  modified  or  created  by  the 
user. 

STATUS _ ERROR 

is  raised  If  NODE  Is  an  open  node  handle  prior  to  the  call  or  if  FILE_NO!)E  is  not 
an  open  node  handle. 

LOCK  _  ERROR 

is  raised  If  access  with  Intent  APPEND_  RELATIONSHIPS  to  the  current  process 
node  cannot  be  obtained  due  to  an  existing  lock  on  the  node. 

INTENT_  VIOLATION 

Is  raised  If  the  node  designated  by  FILE_NODE  was  not  opened  with  an  Intent 
establishing  the  right  to  execute  Its  contents. 


Notes: 

SPAWN_PROCESS  does  not  return  results  or  process  status.  If  coordination  between  any  task 
and  the  new  process  is  desired,  AWAIT_PROCESS_COMPLETION  or  the  techniques 
provided  In  CAIS  Input  and  output  (see  Section  5.3)  must  be  used. 
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S.2.2.2.  Awaiting  termination  or  abortion  of  another  process 
procedure  aiait_process_completion 

(NODE :  ”  in  NDDE_TTPE; 

TIME  LIMIT:  in  DURATION  :=  DURATION 'LAST) ; 


Purpose: 

This  procedure  suspends  the  calling  task  and  waits  for  the  process  identified  by  NODE  to 
terminate  or  abort.  The  calling  task  Is  suspended  until  the  Identified  process  terminates  or 
aborts  or  until  the  time  limit  Is  exceeded 

Parameters: 

NODE  is  an  open  node  handle  for  the  process  to  be  awaited. 

TIME_LIM!T  is  the  limit  on  the  time  that  the  calling  task  will  be  suspended  awaiting  the  process. 

When  the  limit  is  exceeded  the  calling  task  resumes  execution.  The  default  Is  the 
Implementation-dependent  maximum  value  for  DURATION. 


Exceptions: 

NAME  _  ERROR 

is  raised  If  the  node  Identified  by  NODE  is  Inaccessible  or  unobtainable. 

STATUS _ ERROR 

Is  raised  If  NODE  is  not  an  open  node  handle. 

INTENT_  VIOLATION 

is  raised  if  NODE  was  not  opened  with  an  Intent  establishing  the  right  to  read 
attributes. 


Additional  Interface: 

procedure  awaitprocesscompletion 

(NODE-  “  :  in  NODETYPE; 

RESULTS  _RETURNED  :  in  OUt  RESULTSJLIST; 

STATUS  OUt  PROCESS_STATUS ; 

TIME  LIMIT  :  in  DURATION* :=  DURATION ’LAST) 

u 

begin 

AWAIT_PROCESS_COMPLETION  (NODE,  TIME  LIMIT)  ; 

GET_RESULTS  (NODE,  RESULTS_RETURNED) 7 
STATUS  :=  STATUS  0F_PR0CEsI  (NODE); 
end  AWAIT  PROCESS  COMPLETION; 


S.2.2.3.  Invoking  a  new  process 
procedure  invokeprocess 


(NODE: 

in 

out  NODEjnrPE ; 

FILE_N0DE : 

in 

NODE JtYPE ; 

RESULTS_R£TURWED : 

in 

out  RESULTS_LIST ; 

STATUS :” 

OUt  PROCESS* STATUS; 

INPUT_PARAMETERS : 

in 

PARAMETERLIST; 

KEY: 

in 

RELATIONSHIPJCEY  :=  LATEST JCET; 

RELATION : 

in 

RELATION  NAME : ^DEFAULT  RELATION; 
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ACCESS  CONTROL: 

in 

LISTTYPE  .* 

ekpty_list; 

LEVEL:” 

in 

LISTJYPE  :  = 

EMPTir~LIST; 

ATTRIBUTES: 

in 

LISTJTfPE 

*  EMPTY_LIST ; 

INFUTFILE : 

in 

NAME "STRING 

=  CURRENT_INPUT ; 

OUTPUTFILE 

in 

nave” STRING 

=  current”outfvt 

ERROR_FILE : 

in 

bane”string 

=  CURRENTJERROR. 

ENVIRCNMENT_NODE : 

in 

NAME  STRING 

=  CURRENT  NODE; 

TINE  LIMIT.” 

in 

DURATION  :=  DURATION 'LAST) ; 

Purpose: 

This  procedure  provides  the  functionality  described  by  the  following  Ada  fragment  except  that 
the  Implementation  must  guarantee  that  only  exceptions  raised  by  the  call  to 
SPA WN_ PROCESS  In  this  fragment  are  raised  by  FNVOKE_  PROCESS. 

SPA*N_PROCESS  (NODE.  FILE  ROSE.  I NPUTP ARAMETERS .  KEY,  RELATION , 

ACCESS  CONTROL.  LEVEL. "ATTRIBUTES,  INPUT_FILE. 

OUmJT~FILE,  ERROR_FILE.  EMVIRONMENT_NQDE)  ; 

AWAIT_PROCESS  COMPLETION  (NODE,  TINE  LIVID ; 

CET_RESULTS  (NODE,  R£SULTS_RETURNED)7 
STATUS  : -  STATUS_OF_PROCESS  (NODE) ; 

Parameters: 

NODE  Is  a  node  handle  returned  open  on  the  newly  created  process  node. 

PfLE_NODE  Is  an  open  node  handle  on  the  file  node  containing  the  executable  Image  whose 
execution  will  be  represented  by  the  new  process. 

RESULTS  RETURNED 

Is  a  list  of  results  which  are  represented  by  strings  from  the  new  process.  The 
individual  results  may  be  extracted  from  the  list  using  the  tools  or 
C  AIS.  LIST  _  UTILITIES. 

STATV.'S  gives  the  process  status  of  the  process.  If  termination  or  abortion  of  the  Identified 

process  can  be  reported  within  the  specified  time  limit,  STATUS  will  have  the  value 
ABORTED  or  TERMINATED.  If  the  process  does  not  terminate  or  abort  within 
the  time  limit,  STATUS  will  have  the  value  READY  or  SUSPENDED. 

INPUT  _  PARAMETERS 

Is  a  list  containing  process  parameter  Information.  The  list  Is  constructed  and 
parsed  using  the  list  handling  tools  of  CAIS.LIST_ UTILITIES.  The  value  or 
INPUT _ PARAMETERS  is  stored  in  the  predefined  attribute  PARAMETERS  of 
the  new  node. 

KEY  Is  the  relationship  key  of  the  primary  relationship  from  the  current  process  node  to 

the  new  process  node.  The  default  Is  supplied  by  the  mechanism  of  Interpreting  the 
LATEST_  KEY  constant. 

RELATION  Is  the  relation  name  of  the  primary  relationship  from  the  current  process  node  to 
the  new  node.  The  default  Is  DEFAULT _ RELATION. 

ACCESS  _  CONTROL 

Is  a  string  defining  the  Initial  access  control  Information  associated  with  the  created 
node. 


LEVEL 


is  a  string  defining  the  classification  label  for  the  ereated  node  (see  TABLE  IV). 
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ATTRIBUTES  is  a  list  which  can  be  used  to  set  attributes  of  the  new  node.  It  could  be  used  by  an 
implementation  to  establish  allocation  of  resources. 

INPUT  _ FILE.  OUTPUT _ FILE.  ERROh_FILE 
are  pathnames  to  file  nodes. 

ENVIRONMENT  _  NODE 

Is  the  node  the  new  process  will  have  as  Its  current  node. 

TIME_LIMIT  Is  the  limit  on  the  time  that  the  calling  task  will  be  suspended  awaiting  the  new 
process.  When  the  limit  Is  exceeded,  the  calling  task  resumes  execution.  The 
default  Is  the  Implementation  dependent  maximum  value  for  DURATION. 

Exceptions'. 

NAME  ERROR 

is  raised  If  a  node  already  exists  for  the  relationship  specified  by  KEY  and 
RELATION.  NAME_ERROR  Is  also  raised  If  any  of  the  nodes  identified  by 
INPUT  _FILE.  OUTPUT _FILE.  ERROR  _FILE  or  ENVIRONMENT  NODE  do 
not  exist.  It  is  also  raised  If  KEY  or  RELATION  is  syntactically  Illegal  or  If  any 
node  Identifying  a  group  specified  in  the  given  ACCESS_CONTROL  parameter  is 
unobtainable  or  Inaccessible. 

USE_ERROR  Is  raised  If  It  can  be  determined  that  the  node  Indicated  by  F!LE_NODE  does  not 
contain  an  executable  image.  USE_ ERROR  Is  also  raised  if  any  of  the  parameters 
INPUT _ PARAMETERS,  LEVEL.  ACCESS _ CONTROL,  or  ATTRIBUTES  is 
syntactically  or  semantlrally  illegal.  USB_ ERROR  Is  also  raised  If  RELATION  is 
the  name  of  a  predefined  relation  or  If  the  ATTRIBUTES  parameter  contains 
references  to  a  predefined  attribute  which  cannot  be  modified  or  created  by  the 
user. 

STATUS _ ERROR 

is  raised  if  NODE  Is  an  open  node  handle  prior  to  the  call  or  If  FILE_NODE  is  not 
an  open  node  handle. 

LOCK  _ERROR 

Is  raised  If  access  with  Intent  APPEND_RELATIONSIIIPS  cannot  be  obtained  to 
the  current  process  node  due  to  an  existing  lock  on  the  node. 

INTENT_  VIOLATION 

is  raised  If  the  node  designated  by  FlLE_NODE  was  not  opened  with  an  Intent 
establishing  the  right  to  execute  contents. 


Notes: 

Both  control  and  data  (results  and  status)  are  returned  to  the  calling  task  upon  termination  or 
abortion  of  the  Invoked  process  or  when  the  T!MR_  LIMIT  Is  exceeded. 
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S.2.2.4.  Creating  a  new  job 

procedure  CREATE_job 
(FIL£_NODE : 
INPUT_PARAMFTERS : 
KEY : 

ACCESS_COHTROL : 

LEVEL:” 

ATTRIBUTES: 

INPUTFILE: 

OUTPUT_FILE: 

ERROR_FILE : 

ENVIRONMENT  NODE: 


in  NODE  TYPE; 

in  PARAMETER_LIST:=EKPTY_LIST; 
in  RELATIONSHIPJCEY  :=  LATEST JCEY; 
in  LIST  TYPE  :=~EMPTY_LIST; 
in  list"type  :=  empty’list, 
in  LIST~TYPE  :=  EMPTYLIST; 
in  KAMESTRING  :=  CURRENT_IHPUT ; 
in  NAME_STRING  :=  CURRENT’oUTPUT . 
in  KAMl'sTRING  :=  CURRENT- ERROR ; 
in  NAME "string  :=  CURRENTUSER) ; 


Purpose: 

This  procedure  creates  a  new  root  process  node  whose  contents  represent  the  execution  of  the 
program  contained  In  the  specified  file  node.  Control  returns  to  the  calling  task  after  the  new 
Job  Is  created.  The  process  node  containing  the  calling  task  must  have  execution  rights  for  the 
file  node  and  sufficient  rights  to  append  relationships  to  the  node  Identified  by 
■  'CURRENT _ USER".  A  new  primary  relationship  of  the  predefined  relation  JOB  is 
established  from  the  current  user  node  to  the  root  process  node  of  the  new  Job.  The  new  root 
process  as  a  subject  can  acquire  all  discretionary  access  rights  to  its  own  process  node  (the 
object).  Secondary  relationships  emanating  from  the  new  process  node  are  created  and  Inherited 
as  described  In  TABLE  VII. 

The  ACCESS_CONTROL  parameter  specifies  the  Initial  access  control  information  to  be 
established  for  the  created  node.  If  the  CAIS  models  of  discretionary  and  mandatory  access 
control  are  used.  then.  In  addition  to  the  relationships  established  using  the  Information  In  thp 
ACCESS_CONTROL  parameter,  an  access  relationship  is  established  from  the  created  process 
node  to  the  current  user  node,  with  a  GRANT  attribute  value  ((READ.  WRITE.  CONTROL)). 

The  LEVEL  parameter  specifies  the  security  level  at  which  the  node  Is  to  be  created. 

Parameters: 

FILL_NODE  is  an  open  node  handle  on  the  flic  node  containing  the  executable  Image  whose 
execution  will  be  represented  by  the  new  process. 

INPUT  _  PARAMETERS 

Is  a  list  containing  process  parameter  Information.  The  list  Is  constructed  and 
parsed  using  the  tools  provided  In  CAJS.LIST_UTILITIES. 
INPUT _  PARAMETERS  Is  stored  in  the  predefined  attribute  PARAMETERS  of 
the  new  node. 

KEY  Is  the  relationship  key  of  the  primary  relationship  of  the  predefined  relation  JOB 

from  the  current  user  node  to  the  new  process  node.  The  default  Is  supplied  by  the 
mechanism  of  Interpreting  the  LATKST_KEY  constant. 

ACCESS  CONTROL 

Is  a  string  defining  the  Initial  access  control  Information  associated  with  the  created 
node. 

LEVEL  Is  a  string  defining  the  classification  label  for  the  created  node  (see  TABLE  IV'). 
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ATTRIBUTES  is  a  list  which  can  be  used  to  set  attributes  of  the  new  node.  It  could  be  used  by  an 
Implementation  to  establish  allocation  of  resources. 

INPUT_FILE.  OU~PUT_FILE,  ERROR _ FILE 
are  pathnames  to  file  nodes. 

ENVIRONMENT  _  NODE 

is  the  node  the  new  process  will  have  as  Its  Initial  current  node. 


Exceptions: 

NAME  _  ERROR 

Is  raised  If  a  node  already  exists  for  the  relationship  specified  by  KEY  and  the 
relation  JOB.  NAME_ ERROR  Is  also  raised  If  any  of  the  nodes  Identified  by 
INPUT _ FILE,  OUTPUT_FILE,  ERROR _ FILE  or  ENVIRONMENT  NODE  does 
not  exist.  It  Is  also  raised  If  KEY  Is  syntactically  Illegal  or  if  any  node  identifying  a 
group  specified  In  the  ACCESS_ CONTROL  parameter  Is  unobtainable  or 
Inaccessible. 

USE_ ERROR  Is  raised  If  It  can  be  determined  that  the  node  Indicated  by  FILE_NODE  does  not 
contain  an  executable  image.  USE_ERROR  is  also  raised  if  any  of  the  parameters 
INPUT _ PARAMETERS,  LEVEL,  ACCESS_CONTROL.  or  ATTRIBUTES  Is 
syntactically  or  semantically  Illegal.  USE_ERROR  Is  also  raised  If  the 
ATTRIBUTES  parametei  contains  references  to  a  predefined  attribute  which 
cannot  be  modified  or  created  by  the  user. 

STATU S_ ERROR 

is  raised  If  FILE  NODE  Is  not  an  open  node  handle. 

LOCK  ERROR 

Is  raised  If  access  to  the  current  user  node  or  the  current  process  node  with  Intent 
APPEND _  RELATIONSHIPS  cannot  be  obtained  due  to  an  existing  lock  on  the 
node. 

INTENT_  VIOLATION 

Is  raised  If  the  node  designated  by  FILE_NODE  was  not  opened  with  an  Intent 
establishing  the  right  to  execute  contents. 

ACCESS  _  VIOLATION 

Is  raised  If  the  current  process  does  not  have  sufficient  discretionary  access  rights  to 
open  the  current  user  node  with  APPEND  _  RELATIONSHIPS  Intent 
ACCESS_ VIOLATION  Is  raised  only  If  the  conditions  for  raising  NAME_ERROR 
are  not  satisfied. 

SECURITY_V10LATI0N 

Is  raised  If  the  attempt  to  obtain  access  to  the  node  Identified  by 
CURRENT__USER  represents  a  violation  of  mandatory  access  controls  for  the 
CA1S.  SECURITY _ VIOLATION  Is  raised  only  If  the  conditions  for  raising  the 
other  exceptions  are  not  satisfied. 
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Notes: 

CREATE _  JOB  does  not  return  results  or  process  st  itus  to  the  calling  program  unit.  If 
coordination  between  any  program  unit  and  the  new  process  is  desired, 
AWAIT_PR0CESS_C0MPLET10N  or  the  techniques  provided  in  CAJS  input  and  output 
(see  Section  5.3)  must  be  used. 

The  relation  name  for  the  primary  relationship  to  the  new  node  Is  JOB. 

S.2.2.5.  Appending  results 

procedure  APPEKDJtESULTS  (RESULTS :  10  RESULTSSTRIRC) ; 


Purpose: 

This  procedure  inserts  the  value  of  its  RESULTS  parameter  as  the  last  Item  in  to  the  list  which 
Is  the  value  of  the  RESULTS  attribute  of  the  current  process  nodr 
Parameters: 

RESULTS  Is  a  string  to  be  appended  to  the  RESULTS  attribute  value  of  the  <urrent  prr  ,-ss 
node. 


Exceptions: 

LOCK  _  EPvROR 

is  raised  If  access  with  intent  WRITE _ ATTRIBUTES  to  the  current  process  node 
cannot  be  obtained  due  to  an  existing  lock  on  the  node. 

5.2.2.O.  Overwriting  results 

procedure  WRITERESULTS  (RESULTS:  in  RESULTSSTRIRG)  ; 


Purpose: 

This  procedure  replaces  the  value  of  the  RESULTS  attribute  of  the  current  process  node  with  a 
list  containing  a  single  Item  which  is  the  value  of  the  parameter  RESULTS. 

Parameters: 

RESULTS  Is  a  string  to  be  stored  In  the  RESULTS  attribute  of  the  current  process  node. 


Exceptions: 

LOCK  _  ERROR 

Is  raised  If  access  with  Intent  WRITE_ATTR!BUTES  to  the  current  process  node 
cannot  be  obtained  due  to  an  existing  lock  on  the  node. 


5. 2.2.7.  Getting  results  from  a  process 

procedure  cet_results (rode :  in  rode  type: 

RESULTS:  in  Out  RESULTS  LIST); 


Purpose: 

This  procedure  returns  the  value  of  the  attribute  RESULTS  of  the  process  node  identified  by 
NODE.  The  process  need  not  have  terminated  or  aborted.  The  empty  list  is  returned  In 
RESULTS  If  WRITE_ RESULTS  or  AI’I’END_RESUI.TS  has  not  been  called  by  the  process 
contained  In  the  node  Identified  by  NODE. 


SO 
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Parameters: 

NODL  Is  an  open  node  handle  on  a  process  node. 

RESISTS  Is  an  unnamed  list  of  strings  which  returns  the  value  of  the  RESULTS  attribute  or 

the  process  node  Identified  by  NODE.  The  Individual  strings  may  be  extracted 
from  the  list  using  the  tools  or  CAJS.L1ST_ UTILITIES  (see  Section  5.t). 

Exceptions: 

USE_  ERROR  Is  raised  If  the  node  Identified  by  NODE  Is  not  a  process  node. 

STATUS _ ERROR 

Is  raised  If  NODE  Is  not  an  open  node  handle 
INTENT_  VIOLATION 

Is  raised  If  the  NODE  was  noi  opened  with  an  intent  establishing  the  right  to  read 
attributes. 


Additional  Interfaces: 

procedure  getjiesults  (node  in  hope  type. 

RESULTS  in  out  RESULTSLIST; 
STATUS :  Out  PRDCESS  STATUS) 

is 

begin 

CETRESULTS (NODE.  RESULTS ) ; 

STATUS :  = STATUS  OF  PROCESS  (MODE)  ; 
end  CET  RESULTS;  ” 


procedure  CET  RESULTS (NAME :  in  NAMESTRING. 

RESULTS:  in  out  RESULTS_LIST ; 
STATUS :  out  PROCESS  STATUS) 

is 

MODE:  NQDE_TYPE ; 
begin 

OPEM(HODE,  MAME.  (1=>READ_ATTRIBUTES))  I 
GET_RESULTS(NODE.  RESULTS); 

STATUS  = STATUS  OF  PROCESS (NODE) ; 

CLOSE (NODE) ; 

exception 

when  othera  => 

CLOSE  (NODE)  ; 

raise, 

end  GET  RESULTS; 


procedure  get_results (name  in  name  string; 

RESULTS  in  out  RESULTS  LIST) 

ia 

MODE  MODE_TYPE; 
begin 

OPEN  (MODE.  MAME,  U  =  >READ_ATTRIB  ~ES) )  ; 
GET_RESULTS  (NODE ,  RESULTSU 
CLoiE (NODE) ; 
exception 

when  othera  => 

CLOSE (NODE) ; 
raise; 

end  GET  RESULTS, 
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5. 2.2. 8.  Determining  the  status  of  a  process 

function  status_of_process (mode :  in  mode jitpe) 
return  process  status; 


Purpose: 

This  Function  returns  the  current  status  of  the  process  represented  by  NODE.  It  returns  the 
value  of  the  attribute  CURRENT  _ST ATI1''  associated  with  the  process  node  Identified  by 
NODE. 

Parameters: 

NODE  Is  an  open  node  handle  identifying  the  node  of  the  process  whose  status  Is  to  be 

queried. 


Exceptions: 

USE_ ERROR  Is  raised  if  the  node  Identified  by  NODE  Is  not  a  process  node. 

STATUS  _  ERROR 

Is  raised  If  NODE  Is  not  an  open  node  handle. 

INTENT  _  VIOLATION 

is  raised  If  the  node  handle  NODE  was  not  opened  with  an  intent  establishing  the 
right  to  read  attributes. 


Additional  Interface: 

function  status  ofprocess  (make  :  in  kame_strimg) 
return  process  status 

is 

MODE  MODE  TTPE: 

RESULT  PROCESS  STATUS; 

begin 

OPEM (MODE ,  MAKE.  ( 1  =  >READ_ATTRI BUTES) ) ; 

RESULT  :=  STATUS  OF  PROCESS  (MODE)  ; 

CLOSE  (MODE); 
return  result; 
exception 

when  others  => 

CLOSE (MODE) ; 
raise; 

end  STATUS  OF  PROCESS; 


5. 2. 2.0.  Getting  the  parameter  list 

procedure  get_parameters  (parameters  :  in  out  parameter  list)  ; 

Purpose: 

This  procedure  returns  the  value  of  the  predefined  attribute  PARAMETERS  of  the  current 
process  node. 

Parameters: 

PARAMETERS 
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ACCESS  _  CONTROL 

defines  the  Initial  access  control  Information  associated  with  the  created  node 


LEVEL  defines  the  classification  label  for  the  created  node. 


Exceptions: 

NAME_  ERROR 

is  raised  If  a  node  already  exists  for  the  node  specified  by  KEY  and  RELATION,  if 
KEY  or  RELATION  Is  syntactically  Illegal,  or  If  any  node  Identifying  a  group 
specified  In  the  given  ACCESS_CONTROL  parameter  Is  unobtainable  or 
Inaccessible. 

USE _  ERROR  Is  raised  If  any  of  the  parameters  ACCESS _  CONTROL,  LEVEL  or  ATTRIBUTES 
is  syntactically  or  semantically  Illegal.  USE_ERROR  Is  also  raised  If  interpretation 
of  the  ATTRIBUTES  parameter  would  result  in  modification  or  creation  of  any 
predefined  attribute.  USE_ERROR  is  also  raised  If  RELATION  Is  the  name  of  a 
predefined  relation  that  cannot  be  modified  or  created  by  the  user. 

STATUS_ ERROR 

Is  raised  If  BASE  Is  not  an  open  node  handle  or  If  FILE  Is  an  open  file  handle  prior 
to  the  call. 


INTENT  _  VIOLATION 

is  raised  ir  BASE  was  not  opened  with  an  intent  establishing  the  right  to  append 
relationships. 


SECT  R!TY_ VIOLATION 

Is  raised  If  the  operation  represents  a  violation  of  man  itory  access  controls 
SEOlT{ITY_ VIOLATION  Is  raised  only  If  the  conditions  I  r  other  exceptions  arc 
not  present 

Additional  Interface: 

procedure  create  (file:  in  out  file  tyre. 


RARE 

in 

RARESTRIHC. 

NODE: 

in 

FILE~R0DE  := 

INUUT_FIL£, 

FORR 

in 

LIST_TVPE 

=  ERPTYLIST. 

ATTRIBUTES 

in 

LISTJTTPE 

=  ERPTY_LIST , 

ACCESS_C0RTR0L : 

in 

list'type 

=  ERPTY_LIST. 

LEVEL." 

in 

LIST  TYPE 

=  ERPTY  LIST' 

ia 

BASE  «CIDE_TYPE , 

begin 

OPERtBASE,  BASE  PATH  (RARE)  ,  (1  =  >APPERD_R£LATI0KSHIPS)  )  ; 
CREATE  (FILE ,  BASE  .  LAST _ KEY  (RARE)  ,  LAST_RELATIOH  (RARE)  . 

RODE  ,  FOR R  ,  ATTRIBUTES  ,  ACCF.SS  CONTROL .  LEVEL)  : 
CLOSE (BASE)  . 
exception 

when  other*  => 

CLOSE (FILE) ; 

CLOSE (BASE) . 
raise. 

end  CREATE. 
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FILK_MODE  Indicates  whether  Input  operations,  output  operations  or  bot  h  ran  be  performed  on  the 
direct-access  file. 


5. 3. 2. 2.  Creating  a  direct  input  or  output  file 

procedure  create  (file  in  out  file_type ; 


BASE 

in 

NODE  TYPE, 

KEY 

in 

RELATIONSHIP  JCEY  :  = 
LATEST  JCEY, 

RELATION : 

in 

RELA?ION_NAME  :  = 
DEFAULT  RELATION, 

MOPE: 

in 

FILE_NODE 

s  INOUT_FILE. 

FORN 

in 

LISTTYPE 

=  EMPTY_LIST, 

ATTRIBUTES  : 

in 

LIST  TYPE 

=  EMPTY_LIST ; 

ACCESS_CONTRDL : 

in 

'  IST~TYPE 

=  EMPTYLIST: 

LEVEL 

in 

LIST  TYPE 

=  EMPTY  LIST) 

Purpose: 

This  procedure  creates  a  file  and  Its  file  node;  each  element  of  the  file  is  directly  addressable  by 
an  index.  The  [LRMi  dennes  what  constitutes  sn  demerit.  The  attribute  ACCESS_ METHOD 
Is  assigned  the  value  "(DIRECT,  SEQUENTIAL)"  as  part  of  the  creation. 


The  FORM  parameter  Is  used  to  provide  file  characteristics  concerning  the  creation  of  the  Hie 
The  predefined  file  characteristic  ESTIMATED _S1ZE  may  be  used  to  specify  an  approximation 
to  the  number  of  storage  units  (i.e,  bytes  or  blocks)  that  should  be  writable  to  the  file.  The 
ESTrMATED_SIZE  characteristic  Is  specified  its  "(ESTIMATED_SIZE  =>  n)",  where  "n"  Is 
any  NATURAL  number 

The  ATTRIBUTES  parameter  defines  and  provides  initial  values  for  attributes  of  the  node.  The 
AOCESS_CONTROL  parameter  specifies  Initial  access  control  Information  to  be  established  for 
the  created  node  (see  Section  4. 4.2-1  for  details) 


The  LEVEL  parameter  specifies  the  security  level  at  which  the  file  node  Is  to  be  created 


The  value  of  the  attribute  F!LE_KIND  for  the  file  node  will  be  SECONDARY_STORAGE. 
Parameters. 


FILE 

BASE 

KEY 

RELATION 

MODE 

FORM 


Is  a  file  handle.  Initially  closed,  to  be  opened. 

Is  an  open  node  handle  to  the  node  which  will  be  the  source  of  the  primary- 
relationship  to  the  new  node. 

Is  the  relationship  key  of  the  primary  relationship  to  be  created. 

Is  the  relation  name  of  the  primary  relationship  to  be  created. 

Indicates  the  mode  of  the  file. 

Indicates  file  characteristics 


ATTRIBUTES  defines  Initial  values  for  attribute  of  the  newly  created  node 
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6.3.1.  Package  IQ-J)EFINTT1QNS 

This  package  defines  the  types  and  exceptions  associated  with  file  nodes. 

type  CHARACTERARRAY  U  array  (CHARACTER)  of  BOOLEAN  ; 

type  FILEJIODE  la  (IN_FXLE,  INOUTJILE.  OUT_FIL£,  APPEHD_FILE)  ; 

type  FILE_TYPE  is  limited  private; 

type  FUNCTION  JCTYJ5ESCRIPTOR  (LENGTH.  POSITIVE)  is  private; 

type  TAB_ENUX£RATI ON  ia  (HORIZONTAL.  VERTICAL)  ; 

type  POSITIONJTYPE  is 
record 

ROW  :  NATURAL; 

COLUMN  :  NATURAL; 

end  record; 


CHARACTER _  ARRAY  provides  Information  concerning  the  characters  that  can  be  obtained  during 
s  GET  operation.  FILE  MODE  indicates  the  type  of  operations  that  are  to  be  permitted  on  a  file. 
Analogous  to  the  (LRM|  type  FILE _ TYPE  and  the  CAJS  type  NODE_TYPE.  the  CAJS  provides  a 
type  FILE_TYPE  whose  values  are  references  to  Internal  files.  FELE_TYPE  Is  used  for  controlling 
the  operations  on  all  files.  FUNCTION_KEY_DESCRIPTOR  is  used  to  determine  the  function 
keys  entered  from  a  terminal.  TAB _ ENUMERATION  Is  used  to  specify  the  kind  of  lab  stop  to  be 
set  POSITION _TYPE  is  used  to  specify  a  position  on  a  terminal. 

This  package  also  provides  the  definitions  for  all  exceptions  generated  by  the  input  and  output 
packages.  These  definitions  are  comparable  to  those  specified  In  the  package  IO_ EXCEPTIONS  in 

the  ;lrm; 


6.3.2.  Package  DIRECT _ IQ 

This  package  provides  facilities  for  direct-access  Input  and  output  to  CAJS  files  comparable  to  those 
described  in  the  DIRECT_lO  package  of  jLRMi-  Files  written  with  the  CAJS.I>mECT_10  are  also 
readable  by  CAIS.SEQUENTlAL_IO,  If  the  two  packages  are  Instantiated  with  the  same  generic 
data  type. 

The  package  specification  and  semantics  of  the  CAIS. DIRECT _IO  are  comparable  to  those  of  the 
(LRMI  package  DIRECT_IO.  All  subprograms  present  In  the  [LRMj  package  DIRECT  _IO  are 
present  In  this  CAIS  package.  The  following  se>  Hons  demonstrate  only  the  specifications  and 
semantics  that  differ. 

6.3. 2.1.  Subtypes  and  constants 

subtype  FILE_TYPE  Is  CAIS .  IO_DEFINITIDNS .  FILE_TYTE; 
subtype  file_mode  Is  cais.io_oefinitions  file_node; 

FILE  _  TYPE  describes  the  type  for  file  handles  for  all  direct  Input  and  outpul  operations. 
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Table  DC. 

File  node  predefined  attributes,  attribute  values  and 

relation 

Secondary 

Magnetic 

Storage 

Queue 

Terminal 

Tape 

♦ - 

♦— 

- ♦- 

♦ 

ACCESS  METHOD 

1 

A 

1 

A 

1 

A 

1 

A  1 

sequential 

1 

V 

I 

V 

1 

1 

1 

DIRECT 

1 

V 

1 

1 

1 

1 

TEXT 

1 

V 

1 

V 

1 

V 

1 

V  1 

FILE  KIND 

1 

A 

1 

A 

1 

A 

1 

A  1 

SECONDARY  STORAGE 

1 

V 

I 

1 

1 

1 

QUEUE 

1 

1 

V 

1 

1 

1 

TERMINAL 

1 

1 

1 

V 

1 

1 

MAGNETIC  TAPE 

1 

1 

1 

1 

V  1 

QLEUE  KIND 

1 

1 

A 

1 

1 

1 

SOLO 

1 

1 

V 

1 

1 

1 

NIMIC 

1 

1 

V 

1 

1 

1 

COPY 

1 

1 

V 

1 

1 

1 

TERMINAL  KIND 

1 

1 

1 

A 

1 

1 

SCROLL 

1 

1 

1 

V 

1 

1 

PAGE 

1 

1 

1 

V 

1 

1 

FORM 

1 

1 

1 

V 

1 

1 

COUPLE 

1 

1 

A 

1 

1 

1 

♦ - 

♦ 

A  =  an  attribute  or 

relation 

which  appllee 

to 

the  file 

Bode 

V  -  an  attribute  value  (Met 

tbe  attribute 

CM 

have  for 

the  file  node 

The  Input  and  output  operations  In  the  packages  In  t'lis  section  are  expressed  as  operations  on  objects 
of  some  file  type,  rather  than  directly  in  terms  of  tlx  external  files  These  objects  are  files  which  are 
Internal  to  a  CAIS  process  ( internal  files).  Internal  Hies  are  Identified  by  file  handles.  Throughout 
this  document,  the  word  file  Is  used  to  mean  an  Ada  external  nie,  while  In  the  [LRMj  the  word  file  Is 
used  to  mean  an  Internal  file.  The  mode  of  a  file  determines  the  Intents  with  which  Its  associated  file 
node  can  be  opened.  These  corresponding  modes  and  intents  are  given  In  TABLE  X. 


Table  X.  Mo  •>  and  Intents 

If  the  MODE  le: 

tbe  INTENT  au  t  eetahlleh  the  right  to: 

IN  FILE 

read  content! 

OUT  FILE 

vrlte  contents 

INFILE 

read  and  rrlte  content* 

APPEMD_FILE 

i _  - 

append  conter  te 
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It  Is  possible  that  a  single  file  ntxle  may  have  more  than  one  access  method,  as  specified  by  the 
predefined  Attribute  ACCESS  __  METHOD.  The  value  of  the  attribute  ACCESS_MET!!OD 
determines  the  packages  that  may  operate  upon  the  file.  The  predefined  values  for  the  attribute 
ACCESS _ METHOD  are  SEQUENTIAL,  DrRECT,  and  TEXT  or  any  list  combination  of  these.  A 
value  of  SEQUENTIAL  Indicates  that  the  CAIS.SEQUENTIAL_lO  package  may  be  used.  A  value  of 
DIRECT  Indicates  that  the  package  CAIS.DIRECT_IO  may  be  used.  A  value  of  TEIXT  Indicates 
that  the  package  CAJS.TEXT_  IO  may  be  used. 

The  attribute  FILE_KIND  denotes  the  kind  of  file  that  Is  represented  by  the  contents  of  the  file 
node  The  predefined  values  for  the  attribute  FrLE_KIND  are  SECONDARY_STORAGE. 
QUEUE.  TERMINAL,  and  MAG NETIC_ TAPE.  These  values  determine  which  packages  may  be 
used  to  operate  on  flies,  as  shown  In  TABLE  VHI. 

File  nodes  with  a  FTLE__KIND  value  of  QUEUE  also  have  a  predefined  attribute  QUEUE_KJND. 
The  predefined  values  for  the  attribute  QUEUE_KIND  are  SOLO,  MIMIC,  and  COPY. 

File  nodes  with  a  FILE_KIND  value  of  TERMINAL  also  have  a  predefined  attribute 
TERMINAL  _  KIND.  The  values  SCROLL,  PAGE,  and  FORM  are  predefined  for  this  attribute.  In 
addition,  terminal  file  nodes  will  have  a  value  of  TEIXT  for  the  attribute  ACCESS __ METHOD. 

When  a  QUEUE  file  node  Is  created  with  QUEUE_KIND  of  COPY  or  MIMIC,  a  relationship  of  the 
predefined  relation  COUPLE  Is  established  from  the  QUEUE  node  to  the  file  node  which  provides  the 
queue's  initial  contents. 


The  above  discussion  is  summarized  in  TABLE  DC. 
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Table  V 111.  Input  and  output  packages  for  file  kinds 


Secondary 

Storag* 

Qn«a« 

Terminal 

Magnetic 

Tap* 

CAIS. 10  CONTROL 

1 

X 

1 

X 

1 

X 

1 

X 

CAIS. 10  DEFINITIONS 

1 

X 

1 

X 

1 

X 

1 

X 

CAIS .  SEQUENTIAL  10 

1 

X 

1 

X 

1 

1 

CAIS. DIRECT  10 

1 

X 

1 

1 

1 

CAIS  TEXT  10 

1 

X 

1 

X 

1 

X 

1 

X 

CAIS  SCROLL  TERMINAL 

1 

1 

1 

X 

1 

CAIS  PAGE  TERMINAL 

1 

1 

1 

X 

1 

CAIS  TORN  TERMINAL 

1 

i 

1 

X 

1 

CAIS  MAGNETI C  TAPE 

1 

♦ 

1 

1 

1 

-4- 

X 

A  secondary  storage  file  In  the  CAJS  represents  a  disk  or  other  random  access  storage  file.  Secondary 
storage  files  may  be  created  by  use  of  the  CREATE  procedures  specified  in  the  packages 
CAIS. SEQUENTIAL _ IO,  CAIS.DIRECT_I01  and  CAJS.TEXT_IO 

A  queue  file  In  the  CAIS  represents  a  sequence  of  information  that  Is  accessed  In  a  flrst-ln,  first-out 
manner.  There  are  three  kinds  of  CAJS  queue  files:  solo,  copy  and  mimic.  A  solo  queue  operates  like  a 
simple  queue,  initially  empty.  In  which  all  writes  append  information  to  the  end  and  all  reads  are 
destructive.  A  copy  queue  operates  like  a  solo  queue  except  that  It  has  Initial  contents  which  are 
copied  from  another  file;  after  the  creation  of  the  copy  queue.  It  Is  Independent  of  the  file.  A  mimic 
queue  operates  like  a  solo  queue  except  that  It  has  initial  contents  that  are  the  same  as  the  contents 
of  another  file;  after  the  creation  of  the  mimic  queue,  the  mimic  queue  and  the  We  are  mutually 
dependent.  This  means  that.  If  information  Is  written  to  the  mimic  queue  file.  It  Is  appended  to  the 
other  file  as  well  at  an  Implementation  defined  time  which  is  no  later  than  CLOSE  of  the  mimic  queue 
file;  the  effect  on  the  mimic  queue  file  of  writing  or  appending  to  the  other  file  is  Implementation 
defined.  Solo  queue  flies  may  be  created  by  use  of  the  CREATE  procedures  In  the  packages 
CAIS.SEQUENT1AL_10  and  CAJS.TEXT_ IO.  Copy  and  mimic  queue  flies  may  be  created  by  use 
of  the  COUPLE  procedure  in  the  package  IO_ CONTROL. 

A  terminal  file  In  the  CAJS  represents  an  Interactive  terminal  device.  Three  kinds  of  terminal  devices 
are  distinguished  in  the  CAIS;  scroll,  page  and  form.  These  are  distinguished  because  they  have 
different  characteristics  which  require  specialized  interfaces.  Scroll  and  page  terminals  may  be 
represented  either  by  a  single  terminal  file  for  Input  and  output  or  by  two  terminal  flies,  one  for  Input 
and  one  for  output.  The  Implementation  determines,  for  each  physical  terminal,  whether  It  will  be 
represented  by  one  or  two  terminal  files.  If  two  terminal  files  are  used  to  represent  the  terminal  input 
and  output,  then  the  Implementation  maintains  an  Implicit  association  between  the  two  files.  A  form 
terminal  is  represented  by  a  single  terminal  file  for  both  Input  and  output. 

A  magnetic  tape  drive  file  In  the  CAIS  represents  a  magnetic  tape  drive.  Oporailons  on  magnetic 
tape  drive  Wes  can  affect  either  the  magnetic  tape  or  the  drive.  Interfaces  must  be  provided  outside 
the  CAJS  for  the  creation  of  terminal  files  and  magnetic  tape  drive  files. 

Several  predefined  attributes  are  applicable  to  file  nodes.  The  attributes  ACCESS _ METHOD, 
F1LE_KIND,  QUEUE_K!ND.  and  TERMINAL_ KIND  provide  Information  about  the  contents  of  a 
We  node  and  how  It  may  be  accessed. 
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5.2.2.17.  Determining  the  time  a  process  has  been  active 

function  machine_tine  (mode  in  mode  type) 
return  duration; 


Purpose: 

Thi*  function  returns  a  value  of  type  Dl HATTON  representing  the  value  of  the  predefined 
attribute  MACHINE  TIME  of  the  process  nodr  identified  by  NODE. 


Parameters: 

NODE  is  an  open  node  handle  identifying  the  process  node  whose  attribute  is  being 

queried. 


Exceptions: 

USE_ ERROR  is  raised  if  the  node  identified  by  NODE  is  not  a  process  node. 

STATUS  _ERROR 

Is  raised  If  NODE  is  not  an  open  node  handle. 

INTENT  _  VIOLATION 

is  raised  if  the  node  handle  NODE  was  not  opened  with  an  Intent  establishing  the 
right  to  read  attributes. 


Additional  Interface:  ^ 

function  machine  TIME  (MAKE  :  in  NAMESTRING) 
return  duration 

is 

NODE:  NODETYPE: 

RESULT:  DURATION; 
begin 

OPEN (NODE ,  NAME.  ( 1  =  > READ _ ATTRIBUTES) ) ; 
RESULT  .«  UACKINE_TIME (NODE) . 

CLOSE  (NODE)  : 
return  result; 
exception 

when  others  *> 

CLOSE (NODE) ; 
raise; 

end  MACHINE  TIME; 


5.3.  CA1S  input  and  output 

The  CAIS  defines  four  kinds  of  files:  secondary  storage  files,  queue  files,  terminal  files  and  magnetic 
upe  drive  flies.  CAIS  files  are  supported  by  CAIS  Input  and  output  packages  as  described  in  TABLE 
VTII. 


too 


RESULT:  TIME; 

begin 

OraUWODE.  BAKE.  (1=>READ  AT  XIBUTES) )  - 
RESULT  :=  START  TIME (NODE) 

CLOSE (NODE) ; 

return  result; 
exception 

when  others  => 

CLOSE (NODE) , 

ral*«; 

end  START  TIME. 
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5  2  216  Petermininp;  the  time  of 


function  finish  time  (node  : 
return'll  me, 

Purpose: 

This  function  returns  a  value  of  tyt* 


termination  or  shorts™. 


in  MODE  TYPE) 


™.sh_t,me  *  ZZZZ  ZPmo T  °r  ‘h'  ■»"*>■«< 


Parameters 

NODE 


Exceptions: 


Is  an  open  node  handle  Identifying  the  process  nnn 

queried  8  process  node  whose  attribute  Is  being 


USE_  ERROR  is  raised  if  the  node  identified  by  NODE  i>  not  . 
STATl’S_  ERROR 

is  raised  If  NODE  Is  not  »„  open  node  handle 

INTENT  _  VIOLATION 

I*  raised  if  the  node  handle  NODE  was  not  onen 


process  node. 


rlRht  to  read  attributes.  ""  n°‘  0pe"Pd  ",lh  “  »«"nl  establishing  the 


Additional  Interface: 


ia 

"TOE  NODE  TYPE. 

RESULT:  TIME; 
begin 

WTOOE  NAME.  (1  =>READ_ATTRIBUTES}  )  ■ 
"“TOT  :*  FINISH  TIME  (NODE) 

CLOSE (NODE) ; 

return  result; 
exception 

when  other*  *> 

CLOSE (NODE) ; 

raise; 

end  FINISH  TIME; 
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Is  raised  If  the  node  handle  was  not  opened  with  an  Intent  establishing  the  right  to 
read  attributes. 


Additional  Interface: 

function  io_units  (name  :  in  namestring) 
return  natural 

is 

NODE.  NODE_TYPE; 

RESULT.  NATURAL; 

begin 

OPEN  (NODE ,  NAME,  (1  =  >READ  ATTRIBUTES)  )  ; 
RESULT  :*  IO_UNITS (NODE) 

CLOSE (NODE) ;~ 
return  result; 
exception 

when  others  => 

CLOSE (NODE) ; 

raise; 

end  to  units; 


5.2.2.15.  Determining  the  time  of  activation 

function  START  TIME  (NODE  :  in  NODE  TYPE) 
return  TIME; 


Purpose: 

This  function  returns  a  value  of  type  TIME  representing  the  value  of  the  predefined  attribute 
START_TIME  of  the  process  node  identified  by  NODE. 


Parameters. 

NODE  Is  an  open  node  handle  Identifying  the  process  node  whose  attribute  Is  being 

queried. 


Exceptions: 

USE _  ERROR  Is  raised  if  the  node  identified  by  NODE  is  not  a  process  node. 

STATUS _ ERROR 

Is  raised  if  NODE  Is  not  an  open  node  handle. 

LOCK  _  ERROR 

Is  raised  If  the  node  Is  locked  against  reading  attributes. 

INTENT  _  VIOLATION 

Is  raised  If  the  node  handle  NODE  was  not  opened  with  an  Intent  establishing  the 
right  to  read  attributes. 


Additional  Interfaee: 

function  start_time  (name  :  in  name_strin« 
return  TIME 

ia 

NODE.  NODE  TYPE; 
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Exceptions: 

USE  _  ERROR  Is  raised  If  the  node  Identified  by  NODE  Is  not  a  process  node. 
STATUS_ERROR 

Is  raised  If  NODE  Is  not  an  open  node  handle. 


INTENT  _  VIOLATION 

Is  raised  If  the  node  handle  NODE  was  not  opened  with  an  Intent  establishing  the 
right  to  read  attributes. 


Additional  Interface: 

function  handles_open  (name  :  in  hame  string) 
return  natural 

is 

NODE:  NODEjnrPE. 

RESULT:  NATURAL: 
begin 

OPEN (NODE.  NAME.  (1  =  >R£AD_ATTRI0UTES) )  ; 
RESULT  :»  HANDL£5_0PEN  (NODE)  . 

CLOSE (NODE) ; 
return  RESULT; 
exception 

when  others  => 

CLOSE (NODE) ; 
raise: 

end  HANDLES  OPEN; 


5.2.2.14.  Determining  the  number  of  input  and  output  units  used 


function  io  units  (node  :  in  node  type) 
return  natural; 


Purpose: 

This  function  returns  a  natural  number  representing  the  value  of  the  predefined  attribute 
IO_UNlTS  of  the  process  node  Identified  by  NODE. 


Parameters: 

NODE  Is  an  open  node  handle  Identifying  the  process  node  whose  attribute  Is  being 

queried. 


Exceptions: 

USE _ ERROR  Is  raised  If  the  node  Identified  by  NODE  Is  not  a  process  node. 
STATUS _ ERROR 

Is  raised  If  NODE  Is  not  an  open  node  handle. 

LOCK  _  ERROR 

Is  raised  If  the  node  Is  locked  against  rending  attributes. 
INTENT  VIOLATION 
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NODE  Is  an  open  oode  handle  Identifying  the  node  of  the  process  to  be  resumed. 


Exceptions: 

USE _ ERROR  Is  raised  If  the  node  Identified  by  NODE  Is  not  a  process  node. 

STATUS _ ERROR 

Is  raised  If  NODE  Is  not  an  open  node  handle. 

INTENT  _  VIOLATION 

Is  raised  If  the  node  handle  NODE  was  not  opened  with  an  Intent  establishing  rights 
to  read  relationships  and  to  write  attributes  and  contents. 

ACCESS  _  VIOLATION 

Is  raised  If  the  current  process  does  not  have  sufficient  discretionary  access  rights  to 
obtain  access  to  any  node  of  a  process  to  be  suspended  with  Intent  including 
READ_RELATIONSHIPS,  WRITE _  ATTRIBUTES  and  WRITE_ CONTENTS. 

SECURITY  _  VIOLATION 

Is  raised  If  the  attempt  to  obtain  access  to  the  node  Identified  by  NODE  represents 
a  violation  of  the  mandatory  access  controls  for  the  CAJS. 
SECURITY_VIOLATION  Is  raised  only  If  the  conditions  for  raising  the  other 
exceptions  are  not  satisfied. 


Additional  Interface: 

procedure  resukeprocess (name :  in  RAME_STRIXG) 

is 

RODE  RODETYPE. 
begin 

□PER (RODE,  RARE,  (READRELATIORSHIPS.  WRITE  ATTRIBUTES . 

WRITE  COHTERTS)); 

RESUREPROCESS(RODE) ; 

CLOSE (RODE) ; 
exception 

when  others  *> 

CLOSE  (RODE)  ; 

raise: 

end  RESUME  PROCESS; 


5.2.2.13.  Determining  the  number  of  open  node  handles 

function  handles  open  (rode  :  in  rode_type) 
return  natural; 


Purpose: 

This  function  returns  a  natural  number  representing  the  value  of  the  predefined  attribute 
HANDLES  _  OPEN  of  the  process  node  Identified  by  NODE. 


Parameters: 

NODE  Is  an  open  node  handle  Identifying  the  process  node  whose  attribute  Is  being 

queried. 
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Exceptions: 

USE_ERROR  Is  raised  If  Che  node  Identified  by  NODE  Is  not  a  process  node. 

STATUS _ ERROR 

Is  raised  If  NODE  Is  not  an  open  node  handle. 

INTE  NT  _  VIOLATIO  N 

Is  raised  if  the  node  handle  NODE  was  not  opened  with  an  Intent  establishing  rights 
to  read  relationships  and  to  write  attributes  and  contents. 

ACCESS  _  VIOLATION 

Is  raised  If  the  current  process  does  not  have  sufficient  discretionary  access  rights  to 
obtain  access  to  any  node  of  a  process  to  be  suspended  with  Intent  Including 
READ_RELATIONSHIPS,  WRITE _ ATTRIBUTES  and  WRITE_ CONTENTS. 

SECURITY_  VIOLATION 

Is  raised  If  the  attempt  to  obtain  access  to  the  node  identified  by  NODE  represents 
a  violation  of  the  mandatory  access  controls  for  the  CAIS. 
SECURITY_V10LATI0N  Is  raised  only  If  conditions  for  raising  the  other 
exceptions  are  not  satisfied. 


Additional  Interface: 

procedure  suspend  process  (NANE:  in  Hane_string) 

is 

NODE:  NODEJTTPE; 
begin 

□PEN (NODE.  NAME.  CHEAP  RELATIONSHIPS.  WRITEATTRIBUTES , 
■RITE^CONTENTS))  ; 

SUSPEND  PROCESS (NODE) 

CLOSE (NODE) ; 
exception 

when  others  => 

CLOSE (NODE) ; 

raise; 

end  suspend  process: 


Notes: 

SUSPEND_PROCESS  can  be  used  by  a  task  to  suspend  the  process  that  contains  It. 

5.2.2.1  .  Resuming  m  process 

procedure  RESUKEPR0CES8  (NODE :  in  NODEjnrPE)  ; 


Purpose: 

This  procedure  causes  the  process  represented  by  NODE  to  resume  execution. 
RESUME _ PROCESS  does  not  change  the  process  status  if  the  process  Is  not  suspended.  After 
RESUME _ PROCESS  Is  called,  the  PROCESS _ STATUS  of  the  Ideniined  process  Is  READY 
provided  that  the  process  was  In  the  SUSPENDED  status  at  the  time  that  the  resumption  took 
effect.  If  the  node  Identified  by  NODE  Is  the  parent  of  other  process  nodes,  the  other  processes 
are  likewise  resumed.  If  an  exception  Is  raised,  none  of  the  processes  Is  resumed. 

Parameters: 
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0  violation  of  mandatory  access  controls  in  the  CAIS.  SECURITY_VIOLATION  is 
r.^ed  only  If  tbe  conditions  for  raising  the  other  exceptions  are  not  satisfied. 


Additional  Interfaces: 

procedure  abott_process  (rare :  In  aAXEsmiRG; 

RESULTS:  in  RESULTS_STRI*G) 

is 

MODE :  RODE  TYPE; 
begin 

OPES (RODE,  RAKE.  OREAD  RELATTORSHTPS .  WRITE  COWTERTS. 

WRITE  ATTRIBUTES)); 

ABORT  PROCESS  CROCE.  RESULTS); 

CLOSE (RODE); 
exception 

when  other*  «> 

CLOSE  (RODE)  ; 
raise; 

end  ABORT_PROCESS; 

procedure  abort  process  (RODE:  in  rode  type) 

is 

begin 

ABORT J>ROCES8  (RODE. ‘ABORTED*) ; 
end  ABCRTFROCESS ; 

procedure  abort  processCmarE:  in  xamestrirg) 

is 

NODE:  BODE  TYPE; 
begin 

OPE* (RODE.  HARE.  (READ  RELATIOHSHIPS, WRITE  CORTERTS . WRITE  ATTRIBUTES) )  ; 
ABCRT  PROCESS  (RODE.  •ABORTED*)  ; 

CLOSE (RODE} ; 

exception 

when  others  *> 

CLOSE  (NODE): 
raise; 

end  ABORT  PROCESS; 


Notes: 

ABORT_  PROCESS  can  be  used  by  a  task  to  abort  tbe  process  that  contains  It.  It  Is 
Intentional  that  LOCK _ ERROR  will  not  be  raised  by  this  procedure. 


5.2.2.11.  Suspending  a  process 

procedure  suspehd_process(ncoe:  in  rodejtype): 


Purpose: 

This  procedure  suspends  the  process  represented  by  NODE.  After  SUSPEND _ PROCESS  Is 
called,  the  CURRENT _  STATUS  of  tbe  Identified  process  Is  SUSPENDED,  provided  that  the 
process  was  In  the  READY  status  at  the  time  that  tbe  suspension  took  effect. 
SUSPEND _ PROCESS  does  not  change  the  process  status  If  tbe  process  is  not  In  the  READY 
state.  If  the  node  identified  by  NODE  Is  tbe  parent  of  other  process  nodes,  tbe  other  processes 
are  likewise  suspended.  If  an  exception  Is  raised,  none  of  the  processes  are  suspended. 

Parameters: 

NODE  is  an  open  node  handle  Identifying  the  node  of  the  process  to  be  suspended. 
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Is  ft  list  containing  parameter  Information.  Tbe  list  Is  constructed  and  can  t 
manipulated  using  the  tools  provided  In  CAJS.LIST_  UTILITIES 


Exceptions: 

LOCK  _  ERROR 

Is  raised  If  access  with  intent  RELAX) _  ATTRIBUTES  to  the  »  urrent  process  nod 
cannot  be  obtained  due  to  an  existing  lock  on  the  node. 


Notes: 

The  value  of  the  predenned  attribute  PARAMETERS  Is  set  during  process  node  creation;  see 
the  Interfaces  SPAWN _  PROCESS,  INVOKE_ PROCESS  and  CREATE_  JOB. 

5.2.2.10.  Aborting  a  process 

procedure  abort  prdcess (mode  :  tn  «ode_ttpe; 

RESULTS,  in  RESULTS  STRING) ; 


Purpose: 

This  procedure  aborts  the  process  represented  by  NODE  and  forces  any  processes  In  the  subtree 
rooted  at  the  Identified  process  to  be  aborted.  The  order  of  the  process  abortions  Is  not 
specified,  if  the  state  of  the  process  represented  by  NODE  after  return  of  ABORT_ PROCESS 
is  examined.  It  will  be  ABORTED  or  TERMINATED;  It  will  be  TERMINATED  only  If  the 
process  terminated  before  ABORT_ PROCESS  took  effect.  The  node  associated  with  the 
aborted  process  remains  until  explicitly  deleted.  If  an  exception  Is  raised,  none  of  the  processes 
are  aborted. 

Parameters: 

NODE  Is  an  open  node  handle  Tor  the  node  of  the  process  to  be  aborted. 

RESULTS  is  a  string  to  be  appended  to  the  RESULTS  attribute  of  the  node  represented  by 

NODE. 

Exceptions: 

USE_ ERROR  Is  raised  If  the  node  Identified  by  NODE  is  not  a  process  node. 

STATUS_ ERROR 

Is  raised  If  NODE  Is  not  an  open  node  handle. 

JNTENT_  VIOLATION 

Is  raised  If  the  node  was  not  opened  with  an  Intent  establishing  rights  to  read 
relationships  and  to  write  attributes  and  contents. 

ACCESS_  VIOLATION 

Is  raised  If  the  current  process  does  not  have  sufficient  discretionary  access  control 
rights  to  obtain  access  to  any  node  of  a  proecss  to  be  aborted  with  Intent  including 
READ  _  RELATIONSHIPS,  WRITI  _  ATTRIBUTES  and  WRITE_CONTKNTS. 

SECURITY  _  VIOLATION 

Is  raised  If  the  attempt  to  obtain  a<'-ess  to  the  node  Identified  by  NODE  represents 
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5. 3. 2. 3.  Opening  a  direct  input  or  output  file 


procedure  open  (FILE: 

NODE 

MODE: 


in  OUt  FILEJTTPE, 
in  noDEjnrPE; 

in  FILE_MODE) ; 


Purpose: 

This  procedure  opens  *  file  handle  on  a  file,  given  an  open  node  handle  to  the  file  node;  each 
element  of  the  file  Is  directly  addressable  by  an  index. 

Parameters: 

FILE  Is  a  file  handle,  Initially  closed,  to  be  opened. 

NODE  Is  an  open  node  handle  to  the  file  node. 

MODE  Indicates  the  mode  of  the  file. 

Exceptions: 

USE _ ERROR  Is  raised  If  the  attribute  ACCESS  _  METHOD  of  the  file  node  does  not  have  the 

value  DIRECT,  If  the  element  type  of  the  file  does  not  correspond  with  the  element 
type  of  this  Instantiation  of  the  CAIS.DIRF,CT_lO  package,  or  If  the  mode  is 
APPEND_  FILE. 

STATUS  _  ERROR 

Is  raised  if  FILE  Is  an  open  file  handle  at  the  time  of  the  call  on  OPEN  or  if  NODE 
Is  not  an  open  node  handle. 

INTENT  _  VIOLATION 

is  raised  if  NODE  was  not  opened  with  an  Intent  establishing  the  access  rights 
required  for  the  MODE,  as  specified  In  TABLE  X. 


Additional  Interface: 

procedure  open  (FILE:  in  out  file  type; 

NAME  in  NAMEJSTRING; 

NODE:  in  FILEJ10DE  ) 

is 

NODE  :  NODEJTTPE; 

begin 

case  mode  is 

when  IN_FILE  =>  OPEN  (NODE.  NAME,  (1=>READ_C0NTENTS))  ; 
when  OUT_FILE  =>  OPEN  (NODE.  NAME ,  (1=>NRITE_C0KTEMTS)  )  ; 
when  i nout_f ile  => open  (node,  name. 

(R£AD_CONTENTS , WRITE  CONTENTS)); 

when  append_file  =>raise  use_error; 
end  esse; 

OPEN (FILE.  NODE.  NODE) 

CLOSE (NODE) ; 
exception 

when  others  *> 

CLOSE (FILE) ; 

CLOSE (NODE) ; 
raise; 
end  OPEN; 
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Notes: 

The  effects  on  the  oj>en  file  handle  of  closing  an  open  node  handle  on  Its  node  are 
Implementation-defined.  In  particular,  no  assumption  can  be  made  about  the  access  protection 
provided  by  the  node  model. 

5.3. 2.4.  Deleting  a  direct  input  or  output  file 
procedure  DELETE  (FILE:  in  out  FIL£_TTPE) ; 


Purpose: 

In  addition  to  the  semantics  specified  In  [LRMJ,  If  the  node  associated  with  the  open  file  handle 
FILE  Is  not  already  unobtainable,  this  node  is  made  unobtainable  as  If  a  call  to  the 
DELETE_NODE  procedure  had  been  made.  If  this  node  Is  already  unobtainable  by  this  call, 
no  exception  other  than  STATUS _ ERROR  may  be  raised  by  this  procedure. 

Parameters: 

FILE  Is  an  open  file  handle  on  the  file  being  deleted. 


Exceptions: 

NAME_ ERROR 

is  raised  If  the  parent  node  of  the  node  associated  with  the  file  identified  by  FfLE  is 
Inaccessible. 

USE__  ERROR  Is  raised  if  any  primary  relationships  emanate  from  the  node  associated  with  the  file 
Identified  by  FILE. 

STATUS _ ERROR 

is  raised  if  FILE  is  not  an  open  file  handle. 

LOCK  _  ERROR 

Is  raised  If  access  with  Intent  WR1TE_RELAT1DNSH1PS  to  the  parent  of  the  node 
to  be  deleted  cannot  be  obtained  due  to  an  existing  lock  on  the  node. 

ACCESS  _  VIOLATION 

Is  raised  if  the  current  process  does  not  have  sufficient  discretionary  access  control 
rights  to  obtain  access  to  the  parent  of  the  node  to  be  deleted  with  Intent 
WRITE  _ RELATIONSHIPS  or  to  obtain  access  to  the  node  to  be  deleted  with 
Intent  EXCLUSIVE_WR1TE.  ACCESS_ VIOLATION  Is  only  raised  ir  the 
conditions  for  NAME_ERROR  are  not  present. 

SEC!  R1TY  _  VIOLATION 

is  raised  If  the  operation  represents  a  violation  of  mandatory  access  controls. 
SECURITY _ VIOLATION  Is  raised  only  If  the  conditions  for  other  exceptions  are 
not  present. 
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5.3.3.  Package  SEQUENTlAL^IO 

This  package  provides  facilities  for  sequentially  accessing  data  elements  In  CAJS  files.  [LRMj  defines 
what  constitutes  an  element.  These  facilities  are  comparable  to  those  described  In  the 
SEQUENTIAL _IO  package  or  [LRMj. 

The  package  specification  and  semantics  of  the  CAJS.SEQUENTLAL_  IO  are  comparable  to  those  of 
the  [LRMj  package  SEQUENTIAL  _IO.  AJI  subprograms  present  In  the  [LRMj  package 
SEQUENT1AL_10  are  present  In  this  CAJS  package.  The  following  sections  demonstrate  only  the 
specifications  and  semantics  that  differ. 


5. 3. 3.1.  Subtypes  and  Constanta 

subtype  FIL£_TYPE  is  CJUS  .  REDEFINITIONS  .FILE_TYPE; 

subtype  FILE_MOD£  is  CAIS.IOJDEFINITIONS.FILEJIODE; 

FILE_TYPE  describes  the  type  for  file  handles  for  all  sequential  Input  and  output  operations. 
FILE_MODE  indicates  whether  input  operations,  output  operations  or  both  can  be  performed  on  the 
sequential-access  file.  A  mode  of  APPEND_FILE  causes  any  elements  that  are  written  to  the 
specified  file  to  be  appended  to  the  elements  that  are  already  In  the  file. 


S.3.3.2.  Creating  a  sequential  input  or  output  file 
procedure  create  (FILE:  in  out  FILETYPE: 


BASE: 

KEY: 

in 

In 

NODETYPE; 

RELATIONSHIP KEY  :=  LATESTKEY; 

RELATION: 

in 

RELATION  NAME  :=  DEFAULT  RELATION. 

MODE: 

in 

FILE_MODE 

=■  iNour  file. 

FORM: 

in 

LISTJYPE 

=  EMPTYLIST; 

ATTRIBUTES: 

in 

LIST  TYPE 

=  EMPTYLIST; 

ACCESS_CONTROL : 

in 

LISTJYPE 

=  EMPTYLIST; 

LEVEL: 

in 

LIST  TYPE 

=  EMPTY  LIST) ; 

Purpose: 

This  procedure  creates  a  file  and  Its  file  node;  each  element  of  the  file  Is  sequentially  accessible. 
The  attribute  ACCESS_METHOD  Is  assigned  the  value  “(SEQUENTIAL)"  as  part  of  the 
creation. 


The  FORM  parameter  Is  used  to  provide  rile  characteristics  concerning  the  creation  of  the  file. 
The  predefined  file  characteristic  ESTIMATED _SIZE  may  be  used  to  specify  an  approximation 
to  the  number  of  storage  units  (e.g.,  bytes  or  blocks)  that  should  be  writable  to  the  file.  The 
ESTIMATED _ SIZE  characteristic  Is  specified  as  "(ESTIMATED _ SIZE  =>  n)",  where  “n"  Is 
any  NATURAL  number. 


The  ATTRIBUTES  parameter  defines  and  provides  Initial  values  for  attributes  of  the  node.  The 
ACCESS _ CONTROL  parameter  specifies  Initial  access  control  information  to  be  established  for 
the  created  node  (see  Section  4. 4. 2. 1  for  details). 
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The  LEVKL  parameter  specifies  the  security  level  at  which  the  file  node  is  to  be  created. 


The  default  value  for  the  attribute  F1LE_K1ND  for  the  file  node  Is 
SRCONDARY_STORAGE.  The  default  value  may  be  overridden  by  explicitly  specifying  a 
value  of  QUEUE  In  the  attributes  parameter  (l.e.,  "(FILE_KIND  =>  QUEUE)"),  In  which 
case  the  value  of  the  attribute  QUEUE_KIND  is  SOLO. 

Parameters: 

FILE  Is  a  file  handle,  Initially  closed,  to  be  opened. 

BASE  Is  an  open  node  handle  to  the  node  which  will  be  the  source  of  the  primary 

relationship  to  the  new  node. 


KEY  Is  the  relationship  key  of  the  primary  relationship  to  be  created. 

RELATION  Is  the  relation  name  of  the  primary  relationship  to  be  created. 
MODE  indicates  the  mode  of  the  file. 


FORM  indicates  file  characteristics. 


ATTRIBUTES  defines  Initial  values  for  attributes  of  the  newly  created  node. 

ACCESS  _  CONTROL 

defines  the  initial  access  control  information  associated  with  the  created  node. 
LEVKL  defines  the  classification  label  for  the  created  node. 


Exceptions: 

NAME _ ERROR 

Is  raised  If  a  node  already  exists  for  the  node  specified  by  KEY  and  RELATION  or 
if  KEY  or  RELATION  Is  syntactic  illy  Illegal  or  ir  any  node  Identifying  a  group 
specified  In  the  given  ACCESS_  CONTROL  parameter  Is  unobtainable  or 
inaccessible. 

USE_ERROR  is  raised  ir  any  of  the  parameters  ACCESS_CONTROL,  LEVEL  or  ATTRIBUTES 
Is  syntactically  or  semantically  illegal.  USE_  ERROR  Is  also  raised  ir  Interpretation 
of  the  ATTRIBUTES  parameter  would  result  In  creation  of  any  predefined 
attribute  other  than  FILE_KIND.  USE_ ERROR  Is  also  raised  If  RELATION  Is 
the  name  of  a  predefined  relation  that  cannot  be  created  by  the  user. 

STATUS  _  ERROR 

Is  raised  If  BASE  Is  not  an  open  node  handle  or  If  FILE  Is  an  open  file  handle  prior 
to  the  call. 

INTENT  _  VIOLATION 

Is  raised  If  BASE  was  not  opened  with  an  Intent  establishing  the  right  to  append 
relationships. 
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SECURITY  _  VIOLATION 

la  raised  If  the  operation  represents  a  violation  of  mandatory  acrcss  controls 
SECURITY  _  VIOLATION  Is  raised  only  If  the  conditions  for  other  exceptions  are 
not  present. 

Additional  Interface: 


procedure  CREATE  (FILE; 

In  Out  FILE_TYPE; 

NAXE: 

in 

RAXE_STRING; 

NODE: 

in 

FILEJIODE  :  = 

INOUT_FILE; 

FORM: 

in 

LI ST~TYFE  := 

expty”list, 

ATTRIBUTES: 

in 

LISt”tYPE  := 

EXPTYJ.IST; 

ACCESS_CDNTROL 

in 

LIST-TYPE  := 

EXPTYJ.IST; 

LEVEL:' 

in 

LIST_TYPE  := 

Exm-L1ST> 

ia 

BASE  :  NODE_TYPE; 

begin 

OPES  (BASE.  BASE_PATH  (NAME) .  (1  =  >APPEND  RELATIONSHIPS) )  ; 
CREATE (FILE ,  BASE.  LAST  KEY(NAXE).  LAST_RELATION (NAXE) . 

NODE.  FORK.  ATTRIBUTES.  ACCESS_CONTROL,  LEVEL): 
CLOSE (BASE) ; 
exception 

when  others  => 

CLOSE (FILE) ; 

CLOSE (BASE) ; 
raise; 

end  CREATE; 


5.3.3.3.  Opening  a  sequential  input  or  output  file 


procedure  open  (FILE 
NODE 
NODE: 


in  Out  FILE  TYPE; 
in  NODE  JTPE ; 

in  file'ndde) . 


Purpose: 

This  procedure  opens  a  Ole  handle  on  a  file,  given  an  open  node  handle  on  the  Hie  node;  each 
element  of  the  file  Is  sequentially  accessible. 

Parameters: 

FILL  Is  a  file  handle.  Initially  closed,  to  be  opened. 

NODE  Is  an  open  node  handle  to  the  Die  node. 

MODE  Indicates  the  mode  of  the  file. 

Exceptions: 

USE_ ERROR  Is  raised  If  the  attribute  ACCESS_  METHOD  of  the  file  node  does  not  have  the 
value  SEQUENTIAL  or  If  the  element  type  or  the  file  does  not  correspond  with  the 
element  type  of  this  Instantiation  of  the  CA!S.SEQUENT!AL_IO  package. 
USE_Eim<)H  Is  also  raised  ir  the  node  Identified  by  NODE  has  a  value  or  QUEUE 
for  the  attribute  F1LE_K1ND  and  a  value  of  MIMIC  for  the  attribute 
QUEUK_KIND  and  the  mimic  queue  file  Identified  by  FILE  Is  being  opened  with 
MODE  other  than  IN_FILE  but  the  coupled  Hie  (see  Sortlon  5.T5.I3)  has  been 
deleted. 
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STATUS _ ERROR 

Is  raised  If  FILE  Is  as  open  file  handle  al  the  time  of  the  call  on  OPEN  or  If  NODE 
Is  not  an  open  node  handle. 


INTENT  _  VIOLATIO  N 

Is  raised  If  NODE  was  not  opened  with  an  Intent  establishing  the  access  r  ghts 
required  for  the  MODE,  as  specified  In  TABLE  X. 


Additional  Interface: 

procedure  oper(fil£:  in  out  FILE  TYPE; 

SAKE  :  In  RAMESTRING ; 

MODE:  in  FILE~NODE  ) 

ia 

NODE  ;  NODETYPE; 
begin 

case  node  ia 

when  IN_FILE  =>  OPEN  (NODE,  RAKE,  (1  =  >READ_C0NTENTS)  )  ; 
when  OUTFILE  =>  OPENOIODE,  RAKE.  (l=>RRITE_COinTNTS))  ; 
when  IROUT_FILE=>OPER  (RODE,  RARE. 

(R£AD_COHTEKTS  .  WRITE _COKTEKTS)  )  ; 
when  APPERDFILE  =>  OPEN  (NODE ,  RARE  7(1  =  >  APPEND_CDRTE)ITS)  )  ; 
end  case; 

OPEN (FILE.  NODE.  NODE); 

CLOSE (NODE) ; 
exception 

when  others  => 

CLOSE  (FILE)  ; 

CLOSE  (NODE)  ; 
raise; 
end  OPEN; 


5.3.3. 4.  Deleting  a  sequential  input  or  output  file 

procedure  delete  (file  in  out  file  type)  . 


Purpose: 

In  addition  to  the  semantics  specified  In  (LRMi.  If  the  node  associated  with  the  open  file  handle 
FILL  Is  not  already  unobtainable,  this  node  Is  made  unobtainable  as  if  a  call  to  the 
DELETE_NODE  procedure  had  been  made.  If  this  node  Is  already  unobtainable  by  this  call,  no 
exception  other  than  STATUS_  ERROR  may  be  raised  by  this  procedure. 

Parameters: 

FILE  Is  an  open  file  handle  on  the  file  being  deleted. 


Exceptions: 

NAME_  ERROR 

Is  raised  If  the  parent  node  of  the  node  associated  with  the  file  Identified  by  FILE  Is 
Inaccessible. 

USE_ERROR  Is  raised  If  any  primary  relationships  emanate  from  the  node  associated  with  the  file 
Identified  by  FILE. 

STATUS_ ERROR 

Is  raised  If  FILE  Is  not  open  file  handle. 
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LOCK  _  ERROR 

Is  raised  If  access  with  Intent  WRITE_RELATIONSHIPS  to  the  parent  of  the  node 
to  be  deleted  cannot  be  obtained  due  to  an  existing  lock  on  the  node. 

ACCESS  _  VIOLATION 

Is  raised  If  the  current  process  does  not  have  sufficient  discretionary  access  control 
rights  to  obtain  access  to  the  parent  of  the  node  to  be  deleted  with  Intent 
WRITE_  RELATIONSHIPS  or  to  obtain  access  to  the  node  to  be  deleted  with 
Intent  EXCLUSIVE _ WRITE.  ACCESS_V10LATI0N  Is  only  raised  If  the 
conditions  for  NAME_ERROR  are  not  present. 

SECURITY  _  VIOLATION 

is  raised  If  the  operation  represents  a  violation  of  mandatory  access  controls. 
SECUR1TY_V10LATI0N  Is  raised  only  If  the  conditions  for  other  exceptions  are 
not  present. 


5.3.4.  Package  TEXT—IO 

This  package  provides  facilities  for  the  input  and  output  of  textual  data  to  CAJS  files.  [LRM]  defines 
what  constitutes  an  element  of  data.  These  facilities  are  comparable  to  those  specified  in  the  package 
TEXT_IO  in  [LRM].  All  subprograms  present  In  the  [LRM]  package  TEXT_lO  are  present  In  this 
CAIS  package.  The  following  sections  demonstrate  only  the  specifications  and  semantics  that  differ. 


5. 3. 4.1.  Subtypes  and  Constanta 

■  ubtype  FILETYPE  is  CAIS.  ^DEFINITIONS. FILE_TYPE; 

subtype  FILEJKJDE  ia  CATS.  REDEFINITIONS.  FILEJIODE; 

FILE_'n7,E  describes  the  type  for  file  handles  for  all  text  Input  and  output  operations. 
FII.E_MODE  Indicates  whether  Input  operations,  output  operations  or  both  can  be  performed  on  the 
text  file  A  mode  of  APPEND_FILE  causes  any  text  written  to  the  specified  Hie  to  be  appended  to 
the  text  that  Is  already  In  the  file. 


5. 3. 4. 2.  Creating  a  text  input  or  output  file 


procedure  CREATE  (FILE: 

BASE: 

KEY: 

RELATION : 

MODE: 

FORM: 

ATTRIBUTES: 
ACCESS_CONTROL : 
LEVEL  :” 


In  out  FILE  TYPE; 

In  NODE  "type; 

In  RELATIONSHIPS  :*  LATESTKEY; 

in  RELATIDNNAME  :=  DEFAULTRELATION 

In  FILE_MOdI  :=  1N0UT_FILE; 

in  LISTTYPE  :=  EKPTY~LIST ; 

in  LIST  TYPE  :=  EMPTYLIST, 

In  LIST  TYPE  :=  EMPTYLIST. 

In  LISTTYPE  : =  EMPTY  LIST) ; 


Purpose: 

This  procedure  creates  a  file  and  Its  file  node;  the  file  is  textual.  The  attribute 
ACCESS_METIIOD  Is  assigned  the  value  "(TEXT)"  as  part  of  the  creation. 
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The  FORM  parameter  Is  used  to  provide  nie  characteristics  concerning  the  creation  of  the 
external  file.  The  predefined  file  characteristic  ESTIMATED _ SIZE  may  be  used  to  specify  an 
approximation  to  the  number  of  storage  units  (e  g,,  bytes  or  blocks)  that  should  be  writable  to 
the  Tile  The  ESTIMATED_SIZE  characteristic  is  specified  as  "(ESTIMATKD_S1ZE  =>  n)". 
where  "n“  Is  any  NATURAL  number. 

The  ATTRIBUTES  parameter  defines  and  provides  Initial  values  for  attributes  of  the  node.  The 
ACCESS _ CONTROL  parameter  specifies  Initial  access  control  information  to  be  established  for 
the  created  node  (see  Section  4. 4.2.1  for  details). 

The  LEVEL  parameter  specifies  the  security  level  at  which  the  file  node  Is  to  be  created. 

The  default  value  for  the  attribute  FILE_KIND  Is  SECOND AR Y _ STORAGE.  The  default 
value  may  be  overridden  by  explicitly  specifying  a  value  of  QUEUE  In  the  ATTRIBUTES 
parameter  i.e.,  "(FILE_KIND  =>  QUEUE)").  If  the  value  or  FILE_KIND  is  QUEUE,  the 
default  value  of  the  attribute  QUEUE  KIND  Is  SOLO. 


Parameters: 

FILE 

BASE 

KEY 

RELATION 

MODE 

FORM 


Is  a  file  handle,  Initially  closed,  to  be  opened. 

Is  an  open  node  handle  to  the  node  which  will  be  the  source  of  the  primary 
relationship  to  the  new  node. 

Is  the  relationship  key  of  the  primary  relationship  to  be  created. 

Is  the  relation  name  of  the  primary  relationship  to  be  created 
Indicates  the  mode  of  the  file. 

Indicates  file  characteristics. 


ATTRIBUTES  defines  Initial  values  for  attributes  of  the  newly  created  node. 

ACCESS  _  CONTROL 

defines  the  Initial  access  control  Information  associated  with  the  created  node. 
LEVEL  defines  the  classification  label  for  the  created  node. 


Exceptions: 

NAME _ ERROR 

is  raised  If  a  node  already  exists  for  the  node  specified  by  KEY  and  RELATION  or 
If  KEY  or  RELATION  Is  syntactically  Illegal  or  If  any  node  Identlfj  Ing  a  group 
specified  In  the  given  ACCESS_CONTROL  parameter  is  unobtainable. 

USE _ ERROR  is  raised  If  any  or  the  parameters  ACCESS_ CONTROL.  LEVEL  or  ATTRIBUTES 
Is  syntactically  or  semantically  illegal  USE  _  ERROR  Is  also  raised  If  interpretation 
of  the  ATTRIBUTES  parameter  would  result  In  modification  or  creation  of  a 
predefined  attribute  other  than  FILE_KIND.  USE_KRROR  Is  also  raised  If 
RELATION  Is  the  name  of  a  predefined  relation  which  cannot  be  created  by  the 
user. 
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STATl'S_  ERROR 

Is  raised  If  BASE  Is  not  an  open  node  handle  or  If  FILE  Is  an  open  file  handle  prior 
to  the  call 


INTENT_  VIOLATION 

Is  raised  If  BASE  was  not  opened  with  an  Intent  establishing  the  right  to  append 
relationships. 


SKCmiTY  _  VIOLATION 

Is  raised  If  the  operation  represents  a  violation  of  mandatory  access  controls 
SECURITY_ VIOLATION  Is  raised  only  If  the  conditions  for  other  exceptions  are 
not  present. 

Additional  Interface: 

procedure  CREATE (FILE:  in  out  FILE  TYPE; 


MAME: 

MODE: 

In 

In 

EAMESTRIKC 

FILEMODE 

! ; 

IMOUTFILE: 

FORM: 

in 

list'type 

= 

EMPTY~LIST; 

ATTRIBUTES: 

in 

LIST~TYPE 

= 

EMPTY~LIST; 

ACCESS_COMTROL : 

in 

LIST~TYPE 

= 

EMPTYLIST; 

LEVEL: 

in 

LIST  TYPE 

= 

EMPTY  LIST) 

is 

BASE  :  HOPE  TYPE; 
begin 

OPE* (BASE.  BASE  PATH (NAME) ,  (1=>APPEKD  RELATIONSHIPS)); 
CREATE  (FILE.  BASE,  LAST  JCEY  (RAKE)  .  LASTRELATIO*  (MAKE)  . 

BODE.  FORM,  ATTRIBUTES ,  ACCESS  CDKTROL .  LEVEL); 
CLOSE  (BASE)  ; 
exception 

when  others  => 

CLOSE (FILE) ; 

CLOSE  (BASE)  ; 
raise: 

end  CREATE; 


5.3. 4.3.  Opening  a  text  input  or  output  file 


procedure  ope* (FILE: 

■ODE: 

MODE: 


in  OUt  FILE  TYPE; 
in  RODE  "type; 

in  FILE  MODE) ; 


Purpose: 

This  procedure  opens  a  file  handle  on  a  file  that  has  textual  contents,  given  an  open  node  handle 
on  the  file  node. 


Parameters: 

FILE  Is  a  file  handle,  Initially  closed,  to  be  opened. 

NODE  Is  an  open  node  handle  to  the  file  node. 

MODE  Indicates  the  mode  of  the  file. 


Exceptions: 
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USE _ ERROR  Is  raised  If  the  attribute  ACCESS_METHOD  of  the  file  no.  e  does  not  have  the 
value  TEXT  or  the  element  type  of  the  file  does  not  corresp.  .d  with  the  element 
type  of  this  Instantiation  of  the  CAJS.TEXT_IO  package.  LSE_ ERROR  Is  also 
raised  If  the  node  Identified  by  NODE  has  a  value  of  QUEUE  for  the  attribute 
FILE_KIND  and  a  value  of  MIMIC  for  the  attribute  QUEUE_KJNO  and  the 
mimic  queue  file  Identified  by  FILE  Is  being  opened  with  MODE  other  than 
IN  _  FILE  but  the  coupled  file  (see  Section  5.3.5.13)  has  been  deleted. 
USE  _  ERROR  Is  also  raised  If  the  node  Identified  by  NODE  has  a  value  of 
TERMINAL  or  MAGNETIC _ TAPE  Tor  the  attribute  FILE_KIND  and  the  MODE 
Is  APPEND  _  FILE. 

STATUS _ ERROR 

Is  raised  If  FILE  Is  an  open  file  handle  at  the  time  of  the  call  on  OPEN  or  If  NODE 
Is  not  an  open  node  handle. 

INTENT  _  VIOLATION 

Is  raised  if  NODE  has  not  been  opened  with  an  Intent  establishing  the  access  rights 
required  for  the  MODE,  as  specified  In  TABLE  X. 


Additional  Interface: 

procedure  open (file:  in  out  file_type; 

SAME:  in  NAMESIRINC; 

MODE :  in  FILEMODE) 

is 

MODE  :  SDDE_TTPE; 
begin 

case  mode  is 

when  IS  FILE  *>  OPES  (NODE ,  NAME.(l=>READ_CO»rrEMTS))  ; 
when  OUT  FILE  =>  OPES  (NODE ,  SAME.  (1  =  >*RITE_C0NTEJ(TS>)  ; 
when  IS017T  FILE  =>OPEN (NODE. SAME. 

(READCONTENTS .  WRITE_CONTENTS)  )  ; 
when  appendfile  =>  opes  (node,  same.  (i=>append_contents))  . 
end  esse; 

OPES (FILE.  MODE.  MODE); 

CLOSE (NODE) ; 
exception 

when  others  => 

CLOSE (FILE) ; 

CLOSE (MODE) ; 
raise; 
end  open. 

Notes: 

If  the  file  Identified  by  FILE  Is  a  mimic  queue  file  which  Is  being  opened  to  ead  and  Its  coupled 
file  (see  Section  5.3.5.13)  has  been  deleted  or  has  fewer  elements  than  e\  >octed  to  be  In  the 
mimic  queue  file  (e.g.,  if  some  of  the  contents  of  the  coupled  file  have  i>een  deleted),  read 
operations  on  the  mimic  queue  file  will  encounter  an  end  of  file. 


5.3.4. 4.  Deleting  a  text  input  or  output  file 
procedure  delete(file:  in  out  FILE  TTPE); 


Purpose: 

In  addition  to  the  semantics  specified  In  [LRMj,  the  node  associated  with  he  open  file  handle 
FILE  Is  made  unobtainable  as  If  a  call  to  the  DKLETK_NODE  procedure  h  id  been  made. 
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Parameters: 

FILE  Is  an  open  file  handle  on  the  Hie  being  deleted. 


Exceptions: 

NAME_ERROR 

Is  raised  If  the  parent  node  of  the  node  associated  with  the  file  Identified  by  FILE  is 
Inaccessible. 

USE  ERROR  Is  raised  if  any  primary  relationships  emanate  from  the  node  associated  with  the  file 
identified  by  FILE. 

STATUS _ ERROR 

is  raised  if  FILE  Is  not  an  open  file  handle. 

LOCK  _  ERROR 

Is  raised  If  access  with  Intent  WRITE _  RELATIONSHIPS  to  the  parent  of  the  node 
to  be  deleted  cannot  be  obtained  due  to  an  existing  lock  on  the  node. 

ACCESS  _  VIOLATION 

Is  raised  If  the  current  process  does  not  have  sufficient  discretionary  access  control 
rights  to  obtain  access  to  the  parent  of  the  node  to  be  deleted  with  Intent 
W  RITE _  RELATIONSHIPS  or  to  obtain  access  to  the  node  to  be  deleted  with 
Intent  EXCLUSIVE^  WRITE  ACCESS  VIOlJVTION  Is  only  raised  If  the 
conditions  for  NAME_ERROR  are  not  present. 

SECURITY  _V!OI.ATION 

Is  raised  H  the  operation  represents  a  violation  of  mandatory  access  controls 
SECURITY  _  VIOLATION  Is  raised  only  If  the  conditions  Tor  other  exceptions  arc 
not  present 

5. 3. 4. 5.  Resetting  a  text  file 

procedure  resetcfilE:  in  out  file_TYPE; 

MODE  in  FILE  MODE)  ; 


Purpose:  _ 

In  addition  to  the  semantics  specified  In  [LRMj,  application  of  this  procedure  to  a  file  which 
represents  a  magnetic  tape  drive  will  cause  the  magnetic  tape  to  be  rewound  to  the  filemark 
Immediately  preceding  the  current  tape  position.  See  Section  5.3.9  for  more  Information  on 
magnetic  tapes. 

Parameters: 


FILE  Is  an  open  file  handle  on  the  file  begin  reset. 

MODE  Indicates  the  mode  of  the  file. 


Exceptions: 

USE_ ERROR  Is  raised  If  the  node  associated  with  the  file  Identified  by  FILE  has  a  value  of 
TERMINAL  or  MAGNETIC^ TAPE  for  tho  attribute  FILE _ KIND  and  the  MODE 
Is  APPEND  FILE. 
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5.3. 4. 6.  Reading  from  a  text  file 

proced  upe  SET  (...); 


Purpose: 

These  procedures  read  characters  from  the  specified  text  file. 

For  all  values  of  the  attribute  FfLE_KINT>  the  CAiS  defines  only  reading  of  the  printable 
ASCII  characters  plus  the  format  effectors  called  horizontal  tabulation,  vertical  tabulation, 
carriage  return,  line  feed,  and  form  feed.  All  of  the  printable  characters  plus  the  horizontal 
tabulation  and  vertical  tabulation  characters  may  be  read  as  characters  The  characters  carriage 
return  and  line  feed  are  to  be  treated  as  line  terminators  whether  encountered  singly  or  together 
(l.e..  CR.  LF.  CRLF.  and  LFCR  are  line  terminators).  The  character  form  feed  Is  to  be  treated 
as  the  page  terminator. 

When  text  Is  being  read  from  a  file  whose  file  node  attribute  FILE_KIND  has  the  value 
TERMINAL.  It  Is  expected  that  most  Implementations  will  provide  facilities  for  editing  the  Input 
entered  by  the  user  before  making  the  characters  available  to  a  program  for  reading. 

6.3. 4. 7.  Writing  to  a  text  file 
procedure  PUT(.  .) ; 


Purpose 

These  procedures  write  characters  to  the  specified  file. 


The  CAIS  supports  the  transfer  of  Information  to  and  from  a  single  magnetic  tape  volume  Data 
transferred  to  and  from  magnetic  tapes  may  consist  of  the  following  characters: 


Characters 


Representation  or  Characters 


all  printable  characters 

horizontal  tab 

vertical  tab 

carriage  retnrn 

line  terminator 

pegs  terminator 

file  teralnetor 

fill  character 


corresponding  ASCII  characters 

ASCII . HT 

ASCII  VT 

ASCII.CS 

ASCII .LF 

ASCII. FF 

zero  or  sore  nil  characters  lolloeed 
mediately  by  e  tape  Bark 
ASCII  KUL 


Use  of  other  characters  Is  not  defined. 

B.3.4.8.  Setting  the  input  file 

procedure  SET_mwtFILE  :  in  FIL£_ttt>e)  ; 


Purpose: 

In  addition  to  the  semantics  specified  In  the  (LRM1.  the  nie  node  associated  with  the  file 
Identified  by  FILE  becomes  the  target  of  the  relationship  of  the  predefined  relation 
CURRENT_  INPUT  of  the  current  process  node. 

Parameters: 
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Kil  l  Is  an  open  flic  handle 

Exceptions 

MOPE _ ERROR 

Is  raised  If  ihe  mode  of  the  L  Identified  by  FILE  Is  OUT_FH,E  or 
APPEND  _  FILE. 

STATUS_ ERROR 

Is  raised  If  FILE  Is  not  an  open  file  handle 
LOCK  ERROR 

Is  raised  If  the  current  process  node  Is  LOCKed  against  writing  relationships 

5.3.4.B.  Setting  the  output  file 

procedure  set  outputcfile  :  in  file  type)  ; 

Purpose: 

In  addition  to  the  semantics  specified  In  the  [LRMj,  the  (lie  node  associated  with  FILE  becomes 
the  target  of  the  relationship  of  the  predefined  relation  ClTtRENT_ Ol'TPL'T  of  the  current 
process  node 

Parameters 

FILE  is  an  open  flic  handle 

Exceptions: 

MOI>E_  ERROR 

is  raised  if  the  mode  of  the  file  Identified  by  FILE  Is  IN  _ FILE. 

STATUS _ ERROR 

Is  raised  IT  FILE  Is  not  an  open  file  handle. 

LOCK  ERROR 

Is  raised  If  the  current  process  node  is  LOCKed  against  writing  relationships 

5.3.4.10.  Setting  the  error  file 

procedure  SETEJWOTCFILE  :  in  FILE  TYPE) 

Purpose: 

The  file  node  associated  with  the  file  Identified  bv  FILE  becomes  the  target  of  the  relationship  of 
the  predefined  relation  CURRENT _ ERROR  of  the  eurrent  proeess  node. 

Parameters: 

FILE  Is  an  open  flic  handle 

Exceptions 
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MODE  ERROR 

Is  raised  If  the  mode  of  the  file  Identified  by  FILE  is  IN_FILE 
STATES _ ERROR 

Is  raised  If  FILE  Is  not  an  open  file  handle. 

LOCK  _  ERROR 

Is  raised  If  the  current  process  node  Is  LOCKed  against  writing  relationships 

5.3.4.11.  Determining  the  standard  error  file 
function  stakdard_errok  return  file_TTPE, 

Purpose 

This  function  returns  an  open  file  handle  to  the  target  node  of  the  relationship  of  the  predefined 
relation  STANDARD_ERROR  that  was  set  at  the  start  of  program  execution 
Parameters 
None. 

Exceptions 

LOCK  ERROR 

Is  raised  If  the  current  process  node  is  locked  against  reading  relationships. 

5.3.4.12.  Determining  the  current  error  file 
function  current  error  return  file  type. 

Purpose 

This  function  returns  an  open  file  handle  to  the  target  node  of  the  relationship  or  the  predefined 
relation  CCRRENT _ ERROR  which  Is  either  the  standard  error  file  or  the  file  specified  in  the 
most  recent  invocation  of  SET_ ERROR  In  the  current  process. 

Parameters: 

None. 

Exceptions. 

LOCK  _  ERROR 

Is  raised  If  the  current  process  node  Is  locked  against  reading  relationships 

5.3.5.  Package  IO_CONTROL 

This  package  defines  facilities  that  may  be  used  to  modify  or  query  the  functionality  of  CAIS  files  It 
provides  for  association  of  Input  and  output  text  files  with  an  output  logging  file.  It  also  provides 
facilities  for  forcing  data  from  an  Internal  file  to  its  associated  external  file,  for  manipulation  of 
function  keys  and  prompt  strings  and  for  creating  mimic  and  copy  queues. 
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Parameters 

TERMINAL  Is  an  open  file  handle  on  an  output  terminal  file. 

KIND  is  the  kind  (horizontal  or  vertical)  of  tab  stop  to  be  removed. 


Exceptions: 

USE_ERROR  Is  raised  If  TERMINAL  Is  not  the  value  of  the  predefined  attribute  Fn,E_KIND  or 
SCROLL  Is  not  a  value  of  the  predefined  attribute  TERM1NAL_  KIM)  of  the  file 
node  associated  with  the  file  identified  by  the  parameter  TERMINAL,  >r  if  there  is 
no  lab  stop  of  the  designated  kind  at  the  active  position. 

MODE _ ERROR 

Is  raised  If  the  file  Identified  by  TERMINAL  Is  of  mode  IN_FILE. 

STATES _ ERROR 

is  raised  If  TERMINAL  Is  not  an  open  file  handle. 

DEVICE  _  ERROR 

Is  raised  If  an  Input  or  output  operation  cannot  be  completed  h  cause  of  a 
malfunction  of  the  underlying  system. 


Additional  Interface 

procedure  U_EAR_TAB(KIND  in  TABENUMERATI0N  :=  HORIZONTAL) 

ia 

begin 

CLEAR  TAB  ( CURRENT  JKmtrT.  KIND)  . 

end  clean  tab. 


6. 3.0. 7.  Advancing  to  the  next  tab  position 

procedure  tabcitrninal  in  FiLEjnrPE; 

KIND  in  TABENUNERATION  :*  HORIZONTAL , 

COUNT  in  POSITIVE  : *  I)  ; 

Purpose: 

This  procedure  advances  the  active  position  COUNT  tab  stops 
a  change  In  only  the  column  number  of  the  active  position, 
change  In  only  the  row  number  of  i  he  active  position. 

Parameters: 

TERMINAL  Is  an  open  file  handle  on  an  output  terminal  file. 

KIND  Is  the  kind  (horizontal  or  vertical)  of  lab  to  be  advanced. 

COUNT  Is  a  positive  Integer  Indicating  the  number  of  tab  stops  the  active  position  is  to 

advance. 

Exceptions 


Horizontal  advancem  nt  causes 
Vertical  advancement  causes  a 
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return  TERMINAL_SIZE(CURRENT_Otfmrr)  ; 
end  TERMINAL  SIZE, 


5.3. 0.5.  Setting  a  tab  stop 

procedure  set  tab (terminal:  in  file  tyte, 

KIND  in  TAB_ ENUMERATION  :=  HORIZONTAL): 

Purpose 

This  procedure  establishes  a  horizontal  lab  stop  at  the  column  of  the  active  position  If  KIND  Is 
HORIZONTAL,  or  a  vertical  tab  stop  at  the  row  of  the  active  position  if  KIND  is  VERTICAL. 

Parameters: 

TERMINAL  Is  an  open  file  handle  on  an  output  terminal  file. 

KIND  Is  the  kind  (horizontal  or  vertical)  of  tab  stop  to  be  set. 

Exceptions: 

USE_ ERROR  Is  raised  If  TERMINAL  is  not  the  value  of  the  predefined  attribulc  FILE_KIND  or 
SCROLL  Is  not  a  value  of  the  predefined  attribute  TERMINAL_KIND  of  the  file 
node  associated  with  the  file  Identified  by  the  parameter  TERMINAL. 
USE_ERROR  Is  also  raised  If  the  number  of  rows  for  the  terminal  Is  unlimited  and 
KIND  is  VERTICAL. 

MODE_ERROR 

Is  raised  If  the  file  Identified  by  TERMINAL  is  or  mode  IN _ FILE. 

STATES _ ERROR 

is  raised  If  TERMINAL  is  not  an  open  Hie  handle. 

DEVICE  _  ERROR 

Is  raised  If  an  Input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 


Additional  Interface: 

procedure  set  tab  (kind:  in  tab  enumeration  :=  horizontal) 

ie 

begin 

STTTAB (CTJRR£NT_OUTPUT ,  KIND); 
end  set  TAB: 


5.3.O.O.  Clearing  a  tab  atop 

procedure  clear_tab (terminal  :  in  filejtype. 

KIND:  in  TAB_EKUMERATION  :*  HORIZONTAL); 

Purpose: 

This  procedure  removes  a  horizontal  lab  slop  from  the  column  of  the  active  position  If  KIND  Is 
HORIZONTAL  or  a  vertical  tab  stop  from  the  row  of  the  active  position  If  KIND  Is 
VERTICAL. 
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MODE _ ERROR 

Is  raised  If  the  file  Identified  by  TERMINAL  Is  of  mode  IN_ FILE 
STATUS _ ERROR 

Is  raised  If  TERMINAL  Is  not  an  open  file  handle. 

DEV1CE_  ERROR 

Is  raised  If  an  Input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 


Additional  Interface: 

function  get_position 

return  position  type 

is 

begin 

return  err jramoN  (current  janTur) ; 
end  get  position: 


5.3. 0.4.  Determining  the  siie  of  the  terminal 

function  termihai._size  (terminal;  in  file  type) 
return  POSITION  TYPE; 

Purpose: 

This  function  returns  the  maximum  row  and  maximum  column  or  the  output  terminal  file 
Identified  by  TERMINAL.  A  value  of  zero  for  the  row  number  Indicates  that  the  row  number  Is 
unlimited. 

Parameters: 

TERMINAL  Is  an  open  file  handle  on  an  output  terminal  file. 


Exceptions: 

USE_ERROR  Is  raised  If  TERMINAL  Is  not  the  value  of  the  predefined  attribute  FTLE_K1NP  or 
SCROLL  Is  not  a  value  of  the  predefined  attribute  TERMINAL_KIND  of  the  file 
node  associated  with  the  file  Identified  by  the  parameter  TERMINAL. 

MODE_ ERROR 

Is  raised  If  the  file  Identified  by  TERMINAL  Is  of  mode  IN_FILE. 
STATUS_ERROR 

Is  raised  If  TERMINAL  Is  not  an  open  file  handle. 

DEVICE  _  ERROR 

Is  raised  If  an  Input  or  output  operation  cannot  be  completed  !>eeause  of  a 
malfunction  of  the  underlying  system. 


Additional  Interface: 

function  terminal_size 

return  position  type 

ia 

begin 
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Parameters: 

TERMINAL  Is  an  open  file  handle  on  an  output  terminal  file. 

POSITION  U  the  new  active  position  in  the  output  terminal  file. 

Exceptions: 

USE_ERROR  Is  raised  if  TERMINAL  Is  not  the  value  of  the  predefined  attribute  FILE_KIND,  or 
SCROLL  is  not  a  value  of  the  predefined  attribute  TERM1NAL_KIND  of  the  file 
node  associated  with  the  file  Identified  by  the  parameter  TERMINAL. 

MODE_ ERROR 

Is  raised  If  the  file  identified  by  TERMINAL  Is  of  mode  IN_FfLE. 

ST ATUS_ ERROR 

is  raised  If  TERMINAL  is  not  an  open  file  handle. 

LAYOUT _ERROR 

Is  raised  If  the  position  does  not  exist  on  the  terminal  or  the  position  precedes  the 
active  position. 

DEV1CE_  ERROR 

Is  raised  If  an  Input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 


Additional  Interface: 

procedure  srr_POSrnoH  (position:  in  position  type) 

is 

begin 

SET  POSITIONfCURREXT  OUTPin'.  POSITION) , 
end  SET  POSITION; 


6. 3.6. 3.  Determining  the  active  position 

function  cet_position(terninal:  in  filejttpe) 
return  position  TYPE; 

Purpose. 

This  function  returns  the  active  position  of  the  output  terminal  file  Identified  by  TERMINAL. 
Parameters: 

TERMINAL  Is  an  open  (lie  handle  on  an  output  terminal  file. 

Exceptions: 

USE_  ERROR  Is  raised  If  TERMINAL  Is  not  the  value  of  the  predefined  attribute  FILE_  KIND  or 
SCROLL  Is  not  a  value  of  the  predefined  attribute  TERMINAL_KINI)  of  the  file 
node  associated  with  the  file  Identified  by  the  parameter  TERMINAL 
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to  open  with  MODE  other  than  IN-FILE  a  mimic  queue  file  whose  coupled  file  has  been  deleted 
will  raise  a  USE_ERROR  exception. 


6.3.6.  Package  SCROLL _ TERMINAL 

This  package  provides  the  functionality  of  a  scroll  terminal.  A  scroll  terminal  consists  of  two  devices: 
an  Input  device  (keyboard)  and  an  associated  output  device  (a  printer  or  display).  A  scroll  terminal 
may  be  accessed  either  as  a  single  file  of  mode  INOUT_FILE  or  as  two  flies:  one  of  mode  IN_FILE 
(the  keyboard)  and  the  other  of  mode  OUT_FILE  (the  printer  or  display).  As  keys  are  pressed  on  the 
scroll  terminal  keyboard,  the  transmitted  characters  are  made  available  for  reading  by  the 
CAIS.SCROLL_TERMINAL  package.  As  characters  are  written  to  the  scroll  terminal  file,  they  are 
displayed  on  the  output  device. 

The  output  devices  for  scroll  terminals  have  positions  In  which  printable  ASCII  characters  may  be 
graphically  displayed.  The  positions  are  arranged  Into  horizontal  rows  and  vertical  columns.  Each 
position  is  identifiable  by  the  combination  of  a  positive  row  number  and  a  positive  column  number. 
An  output  device  for  a  scroll  terminal  has  a  fixed  number  of  columns  and  might  have  a  fixed  number 
of  rows.  The  rows  are  Incrementally  Indexed  starting  with  one  after  performing  the  NEW_PAGE 
(see  Section  5.3.6.19)  operation.  The  columns  are  Incrementally  Indexed  starting  with  one  at  the  left 
side  of  the  output  device. 

The  active  position  on  the  output  device  of  a  scroll  terminal  Is  the  position  at  which  the  next 
operation  will  be  performed.  The  active  position  Is  said  to  advance  If  (1)  the  row  number  of  the  new 
position  Is  greater  than  the  row  number  of  the  old  position  or  (2)  the  row  number  of  the  Dew  position 
Is  the  same  as  the  row  number  of  the  old  position  and  the  new  position  has  a  greater  column  number. 
Similarly,  a  position  Is  said  to  precede  the  active  position  If  (1)  the  row  number  of  the  position  Is  less 
than  the  row  number  of  the  active  position  or  (2)  the  row  number  of  the  position  Is  the  same  as  the 
row  number  of  the  active  position  and  the  column  number  of  the  position  Is  smaller  than  the  column 
number  or  the  active  position. 

6.3.6. 1.  Subtypes 

subtype  FILE_TYPE  is  CMS  .  REDEFINITIONS  .  FILE  TYPE; 

subtype  function  jcErDEsatiPTOR  is 

CAIS .  10  jDEFfsiTIOSS .  FUNCTION  JCET_DESC*IPTaR ; 

subtype  position_type  is  cais. io_definitions. position  type; 
subtype  tabjpwneration  is  cais  .  iojjefinitions  .tab_ehuherat::)n; 

FILE_TYPE  describes  the  type  for  file  handles.  FUNCTION_KEY_DESCRIPTOR  Is  used  to 
obtain  Information  about  function  keys  read  from  a  terminal.  POSITION-TYPE  describes  the  type  of 
a  position  on  a  terminal.  TAB_ENUMERATION  Is  used  to  specify  the  kind  of  tab  stop  to  be  set. 

6.3. 6.2.  Setting  the  active  position 

procedure  set_position(touinal:  in  file  type; 

POSITION :  in  POSITION  TYPE); 


Purpose: 

This  procedure  advances  the  active  position  to  the  specified  POSITION  In  the  output  terminal 
file  identified  by  TERMINAL. 
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CLOSE (BASE) ; 

exception 

when  others  => 

CLOSE (BASE) ; 

raise: 

end  couple; 

NODE_TYPE ; 

RELATIONSHIP  KEY  :  = 

LATEST  JCEY; 

RELATION  NAME  := 

DEF  AULT_RELATI0N ; 

mame_string7 

LIST~TYPE  :=  EMPTYLIST , 
LISTJTYPE ; 

LIST~TYPE  :=  EMPTYJ.IST; 
LIST_TYPE  :=  EMPTY~LIST) 

FILE_NODE  :  NODE_TYPE , 

begin 

OPEN (F ILE_NODE .  FILENAME 

(READ_ATTRIBUTES,  READ  CONTENTS)); 

COUPLE (QUEUEBASE ,  QUEUEJCEY.  QUEUEJtELATIOM. 

FILE_NODE.  FORM,  ATTRIBUTES.  ACCESS  CONTROL.  LEVEL); 
CLOSE  (FILE  JKJDE)  ; 
exception 

when  others  -> 

CLOSE  (F  ILENODE)  ; 

raise; 

end  couple; 

procedure  couple  (gUEUE  name 
FILE  NAME 
FORM 

ATTRIBUTES: 

ACCESS ^CONTROL 
LEVEL 

is 

FILENODE  :  NODE  TYPE. 

QUEUEBASE  :  NODE  TYPE, 

begin 

OPEN (QUEUEBASE .  BASEPATH (QUEUE_NAME) . 

(1=>APPEND  RELATIONSHIPS)); 

OPEN (F ILENODE .  FILE_NAME, 

(READ" ATTRIBUTES,  READ_CONTENTS)  )  . 

COUPLE  (QUEUEBASE.  LAST  JCEY  (QUEUE_NAME)  , 

LAST_RELATION (QUEUE  NAVE) . 

FILE_NODE ,  FORM,  ATTRIBUTES,  ACCESS  CONTROL,  LEVEL). 
CLOSE (QUEUE_BASE) ; 

CLOSE (FILE_NODE) ; 

exception 

when  others  => 

CLOSE (QUEUE  BASE); 

CLOSE (F I LE_NODE) ; 

raise; 

end  couple; 


in  NAME  STRING, 
in  NAME  STRING; 
in  LIST  TYPE  :*  EMPTY  LIST; 
in  LisTjrrpE; 

in  LIST~TTPE  :«  EMPTYLIST; 
in  LIST  TYPE  :s  EMPTY  LIST) 


procedure  couple  (queue_BASE  :  in 

QPJEUE  KEY :  in 

QUEUE_RELATION;  in 

FILENAME :  in 

FORM:  in 

ATTRIBUTES :  in 

ACCESS_CONTROL :  in 
LEVEL:"  in 


Notes: 

Hoad  operations  on  a  mimic  queue  Dir  whose  roiiplrd  file  has  t>ocn  drifted  or  has  frwrr  elements 
than  exported  In  the  mlmlr  queue  file  (e.g..  If  some  of  the  contents  of  the  coupled  file  have  been 
deleted)  will  encounter  an  end  of  file.  Attempts  to  opena  mlmlr  queue  file  whose  coupled  file 
has  been  deleted  with  MODI)  other  than  IN_KII,K  raises  a  i!SK_KRROK  exception.  Attempts 
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ATTRIBUTES  defines  Initial  values  for  attributes  of  ihe  newly  created  node. 

ACCESS  _  CONTROL 

defines  the  Initial  access  control  Information  associated  with  the  created  node 
LEVEL  defines  the  classification  label  for  the  created  node. 


Exceptions: 

NAME  _  ERROR 

Is  raised  If  a  node  already  exists  for  the  node  Identification  given  by 
QUEUE_BASE,  QUEUE_KEY  and  QUEUE_  RELATION  or  If  this  node 
Identification  is  Illegal.  NAME_ ERROR  is  also  raised  If  any  node  Identifying  a 
group  specified  In  the  ACCESS_CONTROL  parameter  Is  unobtainable  or 
Inaccessible. 

l’SE_  ERROR  Is  raised  If  the  node  Identified  by  FILE _  NODE  Is  not  a  file  node,  does  not  have  a 
FELE_KIND  attribute  value  of  SECOND  ARY_  STORAGE,  or  has  an 
ACCESS  _  METHOD  attribute  value  of  DIRECT  or  If  the  ATTRIBUTES 
parameter  either  has  no  value  for  the  QUEUE_KIND  attribute  or  has  the  value 
QUEUE_K1ND  =>  SOLO.  USE_ ERROR  is  also  raised  If  the  FORM,  LEVEL, 
ACCESS _ CONTROL  or  ATTRIBUTES  parameters  do  not  adhere  to  the  required 
syntax.  USE_ ERROR  Is  also  raised  If  Interpretation  of  the  ATTRIBUTES 
parameter  would  result  in  modification  or  creation  of  any  predefined  attributes 
other  than  QUEUK_KIND.  or  if  QUEUE_RELAT!ON  Is  the  name  of  a  predefined 
relation  which  cannot  be  created  by  the  user. 

STATUS _ ERROR 

Is  raised  if  QVEUE_BASE  and  FILE_NODE  are  not  both  open  node  handles. 
INTENT  __  VIOLATION 

Is  raised  If  QUEUE_BASE  was  not  opened  with  an  Intent  establishing  the  right  to 
append  relationships  or  If  FILE_NODE  was  not  opened  with  an  Intent  establishing 
the  right  to  read  contents  and  attributes. 

SECURITY  _  VIOLATION 

Is  raised  If  the  operation  represents  a  violation  of  mandatory  access  controls. 
SECUR1TY_ VIOLATION  is  raised  only  If  the  conditions  for  other  exceptions  are 
not  present. 

Additional  Interfaces: 

procedure  couple  (guEUEjtAME :  in  Kahestring  , 

FILeJnODE  :  in  pope”  TYPE , 

FOR*”  in  LIST~TYPE  :=  EXPTY_LIST; 

ATTRIBUTES :  in  LISTJYPE; 

access ^control .  in  list'type  :*  ekpty_list. 

LEVEL:'  in  LISt'tyPE  :=  EMPTY'lIST) 

ia 

BASE  :  MODE  TYPE; 
begin 

OPEN (BASE ,  BASE_PATH (QUEUE  NAME),  <1*>APPEND_RELATI0NSHIPS>) ; 

COUPLE  (BASE,  LASTJCEY  (QUEUE  NAME).  LAST_RELAT10N  (QUEUE  NAME), 

FILE  NODE,  FORK,  ATTRIBUTES,  ACCESS  CONTROL .  ~LEVEL)  ; 
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STATUS_  ERROR 

Is  raised  if  TERMINAL  Is  not  an  open  file  node. 


5.3.5.13.  Creating  a  queue  file  node 


procedure  couple 

(QUEUE_HASE  :  in  WDEJTPE ; 

gUEUEJCEY  :in  REUtTIOBSHIPJCEY  :=  LATEST  KEY; 

(JUEUE  RELATl  ON  In  RQATI  0M_HAME  :«  DEF AULT_RELATI  ON ; 

FILE_RODE  :  in  KODE_TTPE ; 

FORM-  :in  LIST~TYPE  :*  EMPTTLIST; 

ATTRIBUTES  :ln  LIST_TYPE;  —  Intentionally  not  defaulted 

ACCESS  COITIROL  : in  LIST~TTPE  :=  E¥PTT_LIST; 

LEVEL  '  in  LIST~TYPE  :*  EKPTT~LIST) . 

Purpose: 

This  procedure  creates  a  queue  file  node  and  its  contents  and  installs  the  primary  relationship  to 
It.  The  relation  name  and  relationship  key  of  the  primary  relationship  to  the  node  and  the  base 
node  from  which  It  emanates  are  given  by  the  parameters  QUEUE  _  RELATION. 
QUEUE_KEY  and  QUEUE_BASE.  A  secondary  relationship  of  the  predefined  relation 
COUPLE  is  created  from  the  created  queue  file  node  to  the  file  node  Identified  by 
FILE  NODE. 


The  initial  contents  of  the  queue  file  is  the  contents  of  the  rile  associated  with  the  file  node 
identified  by  FILE_NODE  at  the  time  the  queue  file  is  created.  The  queue  file  node  Is  created 
with  the  same  ACCESS_METHOD  attribute  value  as  the  node  identified  by  FILE  NODE. 
DIRECT  may  not  be  a  value  of  this  ACCESS _ METHOD  attribute.  The  FILE _ KIND 
attribute  of  the  created  queue  file  node  has  the  value  QUEUE.  The  QUEUE_KIND  attribute 
of  the  created  queue  file  node  Is  set  by  the  appropriate  value  In  the  ATTRIBUTES  parameter. 
ATTRIBUTES  must  include  a  list  item  that  Is  either  QUEUE_TYPE  =>  COPY  or 
QUEUE_TYPE  =  >  MIMIC.  COUPLE  Is  the  only  Interface  that  can  be  used  to  create  a 
mimic  or  copy  queue. 


The  ATTRIBUTES  parameter  defines  and  provides  Initial  values  for  attributes  of  the  node.  The 
ACCESS _ CONTROL  parameter  specifies  initial  access  control  Information  to  be  established  for 
the  created  node. 


The  LEVEL  parameter  specifies  the  security  level  at  which  the  file  node  Is  to  be  created. 
Parameters: 

QUEUE  _  BASE 

Is  an  open  node  handle  to  the  node  from  which  the  primary  relationship  to  the  new 
node  Is  to  emanate. 


QUEUE  _  KEY 

Is  the  relationship  key  of  the  primary  relationship  to  be  created. 

QUEUE  _  RELATION 

Is  the  relation  name  of  the  primary  relationship  to  be  created. 

FILE _ NODE  Is  an  open  node  handle  to  the  nie  node  with  which  the  queue  Is  u>  be  coupled. 
FORM  Indicates  file  characteristics. 
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5.3.5.11.  Enabling  and  disabling  function  key  uaage 

procedure  emabl£_function_iceys  (terminal  in  file  ttpe. 

ENABLE  : in  BOOLEAN): 


Purpose: 

This  procedure  establishes  whether  data  read  as  the  result  of  pressing  a  function  key  on  the 
physical  Input  terminal  is  to  appear  In  the  Input  terminal  file  as  ASCII  character  sequences  or  :i<. 
function  key  Identification  numbers.  A  value  of  TRUE  for  ENABLE  Indicates  that  the  functi'ii 
keys  should  appear  as  numbered  values.  A  value  of  FALSE  Indicates  that  the  function  kevs 
should  appear  as  ASCII  character  sequences.  The  function  keys  are  said  to  have  been  enabled  if 
the  value  of  ENABLE  Is  TRUE. 

Parameters: 

TERMINAL  la  an  open  (lie  handle  on  an  input  terminal  (lie. 

ENABLE  Indicates  how  function  keys  are  to  appear. 


Exceptions: 

USE_ERROR  Is  raised  If  TERMINAL  is  not  the  value  of  the  attribute  FILE_KIND  of  the  node 
associated  with  the  (lie  Identified  by  the  parameter  TERMINAL.  USE_ ERROR  is 
also  raised  If  the  file  Identified  by  TERMINAL  Is  of  mode  OUT_FILE  or 
APPEND  _  FILE. 

STATUS _ ERROR 

Is  raised  If  TERMINAL  Is  not  an  open  file  handle. 


Notes: 

This  procedure  has  no  effect  on  read  operations  of  the  CAIVTEXT_IO  package. 

5.3.5.12.  Determining  function  key  usage 

function  function  kets  ehabled  (terminal  :in  file_type) 
return  boolean  ; 


Purpose: 

This  function  returns  TRUE  if  the  function  keys  are  enabled,  l.e.,  they  appear  In  the  Input 
terminal  file  as  numbered  values;  otherwise  It  returns  FALSE. 

Parameters: 

TERMINAL  Is  an  open  (lie  handle  on  an  Input  terminal  file. 


Exceptions: 

USE_ ERROR  Is  raised  If  TERMINAL  is  not  the  value  or  the  attribute  FILE_KIND  of  the  node 
associated  with  the  file  Identified  by  the  parameter  TERMINAL.  USE_ERROR  Is 
also  raised  If  the  file  Identified  by  TERMINAL  Is  or  mode  OUT_FILE  or 
APPEND  FILE. 
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5.3. 5. 9.  Determining  the  prompt  string 

function  get_p*ohpt  (Tejuikai  -in  FiLEjrrm 
return  sthikc. 

Purpose: 

This  function  returns  the  current  prompt  string  for  the  Input  terminal  file  Identified  by 
TERMINAL. 

Parameters: 

TERMINAL  to  an  open  file  handle  identifying  an  Input  terminal  file. 


Exceptions: 

USE_ERROR  Is  raised  If  TERMINAL  to  not  the  value  of  the  attribute  F!LR_KIND  or  if 
SCROLL  or  PAGE  is  not  a  value  of  the  attribute  TERMINAL__K1ND  of  the  node 
associated  with  the  file  identified  by  the  parameter  TERMINAL. 

MODE _ ERROR 

to  raised  If  the  file  identified  by  TERMINAL  Is  not  of  mode  IN_FfLE  or 
INOUT_FBLE. 

ST AT VS_ ERROR 

to  raised  If  TERMINAL  Is  not  an  open  file  handle. 


5.3.5.10.  Determining  intercepted  characters 

function  I >fTERCEPTEP_CHARACTERS  (TERMIHAL  :in  FILE  TYPE) 
return  character  array; 


Purpose: 

This  function  returns  the  array  CHARACTER^ ARRAY  that  Indicates  the  characters  that  can 
never  appear  In  the  Input  terminal  file  identified  by  TERMINAL  due  to  characteristics  or  the 
underlying  system  and  the  individual  physical  terminal.  A  value  of  TRUE  indicates  that  the 
character  can  appear;  a  value  of  FALSE  Indicates  that  It  cannot  appear. 

Parameters; 

TERMINAL  to  an  open  fUe  handle  on  an  Input  terminal  file. 


Exceptions: 

USE_ERROR  is  raised  If  TERMINAL  to  not  the  value  of  the  attribute  FILE_KINI>  or  the  node 
associated  with  the  file  Identified  by  the  parameter  TERMINAL. 

MODE _ ERROR 

Is  raised  If  the  file  Identified  by  TERMINAL  to  not  of  mode  !N__FILE  or 
INOUT_FILE. 

STATUS _ERROR 

Is  raised  If  TERMINAL  Is  not  an  open  file  handle. 
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USK_ERROR  Is  raised  if  the  file  Identified  by  FILE  has  no  log  file. 

STATUS _ ERROR 

is  raised  if  FILE  is  not  an  open  file  handle. 

5. 3. 5. 7.  Determining  the  file  size 

function  number  of  elements  (file  -.in  filettpe) 
return  natural; 

Purpose: 

This  function  returns  the  number  of  data  elements  contained  In  the  file  identified  by  FILE.  The 
package  that  was  used  to  write  the  elements  determines  what  constitutes  a  data  element. 

Parameters: 

FILE  is  an  open  file  handle  on  a  secondary  storage  or  queue  file. 


Exceptions: 

l'SE_ERROR  is  raised  if  the  value  of  the  attribute  FILE_KIND  of  the  node  associated  with  the 
nie  Identified  by  FILE  Is  TERMINAL  or  MAG NETIC_ TAPE. 

STATUS _ ERROR 

is  raised  if  FILE  is  not  an  open  file  handle. 

&.3.5.S.  Setting  the  prompt  string 

procedure  SETPROMPT  (TERMINAL  in  FILETTPE; 

PROMPT  in  STRING); 

Purpose: 

This  procedure  sets  the  prompt  string  for  the  output  terminal  file  associated  with  the  Input 
terminal  file  identified  by  TERMINAL.  All  future  requests  for  a  line  of  Input  Rom  the  Input 
terminal  file  Identified  by  TERMINAL  will  first  output  the  prompt  string  to  the  associated 
output  terminal  file. 

Parameters: 

TERMINAL  Is  an  open  file  handle  Identifying  an  Input  terminal  file. 

PROMPT  Is  the  new  value  of  the  prompt  string. 


Exceptions: 

USE _ ERROR  Is  raised  If  TERMINAL  Is  not  the  value  *f  the  attribute  FILE  _K!N1>  or  if 
SCROLL  or  PAGE  Is  not  a  value  of  the  altri  Mile  TERM!NAL_KIND  of  the  node 
associated  with  the  file  Identified  by  the  parameter  TERMINAL. 

MODE_ ERROR 

is  raised  If  the  file  Identified  by  TERMINAL  Is  not  of  mode  IN_FILK  or 
INOUT_FILE. 

STATUS  _EHROR 

Is  raised  If  TERMINAL  Is  not  an  open  file  handle. 
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5.3. 5.4.  Removing  a  log  file 

procedure  clear_log(file  in  filejtype)  ; 

Purpose: 

This  procedure  removes  the  association  established  between  the  Hie  Identified  by  FILE  and  Its 
log  file. 

Parameters: 

FILE  Is  an  open  file  handle  on  a  file  that  has  a  log  file. 

Exceptions: 

STATUS _ ERROR 

Is  raised  if  FILE  Is  not  an  open  Die  handle. 

Notes: 

If  FILE  Is  an  open  file  handle  and  there  Is  no  log  file,  this  procedure  has  no  effect. 

5. 3. 5. 5.  Determining  whether  logging  is  specified 

function  loco i sc  (file  :in  filejtype) 
return  boolean: 

Purpose: 

This  function  returns  TRUE  If  the  file  Identified  by  FILE  has  a  log  file  associated  with  It: 
otherwise.  It  returns  FALSE. 

Parameters: 

FILE  Is  an  open  file  handle. 

Exceptions: 

STATUS _ ERROR 

Is  raised  If  FILE  Is  not  an  open  file  handle. 

5. 3. 5.0.  Determining  the  log  file 

function  GET  log  (file  :in  FILEJTYPE) 
return  file  type; 


Purpose: 

This  function  returns  an  open  file  handle  on  the  log  file  currently  associated  with  the  file 
Identified  by  FILE. 

Parameters: 

FILE  Is  an  open  file  handle. 

Exceptions: 
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5. 3. 5. 2.  Synchronizing  program  filea  with  system  files 
procedure  stnchromi ze  (f ile  ;  in  file  type) ; 

Purpose. 

This  procedure  forces  all  data  that  has  been  written  to  the  Internal  file  Identified  by  FILE  to  be 
transmitted  to  the  external  file  with  which  It  Is  associated. 

Parameters: 

FILE  is  an  open  file  handle  on  the  internal  file  to  be  synchronized. 


Exceptions: 

USE_ERROR  is  raised  If  the  file  Identified  by  FILE  Is  of  mode  1N_FILE. 

STATUS _ ERROR 

Is  raised  If  FILE  is  not  an  open  file  handle. 

B. 3.5.3.  Establishing  a  log  file 

procedure  SET_LOG (FILE  :in  FILE_TYPE; 

LOG _F ILE  :  in  FILEJTTPE)  ; 

Purpose: 

This  procedure  associates  a  log  file  Identified  by  LOG_FlLE  with  the  file  Identified  by  FILE. 
All  elements  written  to  the  Internal  file  Identified  by  FILE  are  also  written  to  the  file  Identified 
by  LOG  _  FILE. 

Parameters: 

FILE  Is  an  open  file  handle  on  the  file  which  is  to  have  a  log  file. 

LOG  _  FILE  Is  an  open  file  handle  on  the  file  to  which  the  log  should  be  written. 


Exceptions: 

MODE_ ERROR 

Is  raised  If  the  mode  of  either  of  the  flies  Identified  by  FILE  or  LOG  _  FILE  Is 
IN_FILE. 

USE_ ERROR  Is  raised  If  the  nodes  associated  with  the  files  Identified  by  FILE  and  LOG  _  FILE 
do  not  have  the  same  values  for  the  attribute  ACCESS _METHOD  or  If  the  flies  do 
not  have  compatible  elements  (Implementation-defined). 

STATUS_ ERROR 

Is  raised  If  FILE  and  LOG  _  FILE  are  not  both  open  file  handles. 
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procedure  otoi_file_iiode (file  In  filetype, 

MODE :  in  out  MODE_TYPE. 

irrEMT:  in  urTEwriON; 

TIKE  LIMIT .  in  DURATION :=»0  DELAY). 


Purpose: 

This  procedure  returns  an  open  node  handle  for  the  node  associated  with  the  flic  Identified  by 
FILE. 

Parameters: 

FILE  Is  an  open  file  handle. 

NODE  Is  a  node  handle.  Initially  closed,  to  be  opened. 

INTENT  Is  the  Intent  of  subsequent  operations  on  the  node:  the  actual  parameter  lakes  the 

form  of  an  array  aggregate. 

TIME_LIMIT  specifies  a  time  limit  for  the  delay  on  waiting  for  the  unlocking  of  a  node  In 
accordance  with  the  desired  INTENT. 


Exceptions: 

NAME  _  ERROR 

Is  raised  If  the  node  to  which  a  handle  Is  to  be  opened  Is  inaccessible  or  if  It  Is 
unobtainable  and  the  given  INTENT  Includes  any  intent  other  than  EXISTENCE. 

USE_ERROR  Is  raised  If  the  specified  INTENT  Is  an  empty  array. 

STATUS _ ERROR 

Is  raised  If  FILE  Is  not  an  open  file  handle  or  If  NODE  Is  an  open  node  handle. 
LOCK  _ERROR 

Is  raised  If  the  OPEN  _FILE_  NODE  operation  Is  delayed  beyond  the  specified 
time  limit  due  to  the  existence  of  locks  In  conflict  with  the  specified  Intent. 

ACCESS  _  VIOLATION 

Is  raised  If  the  current  process’  discretionary  access  control  rights  are  Insufficient  to 
obtain  access  to  the  node  consistent  with  the  specified  INTENT. 
ACCESS _ VIOLATION  Is  raised  only  If  the  conditions  for  NAME_ ERROR  are 
not  present. 

SECUR!TY__  VIOLATION 

Is  raised  If  the  operation  represents  a  violation  of  mandatory  access  controls 
SECURITY_ VIOLATION  Is  raised  only  If  the  conditions  for  other  exceptions  arc 
not  present. 
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USE_ERROR  is  raised  If  TERMINAL  Is  not  the  value  of  the  predefined  attribute  FILE_KIND. 

SCROLL  Is  not  a  value  of  the  predefined  attribute  TERMINAL_KIND  of  the  fll" 
node  associated  with  the  file  Identified  by  the  parameter  TERMINAL,  or  there  are 
fewer  than  COUNT  tab  stops  of  the  designated  kind  after  the  active  position 

MODE _ ERROR 

is  raised  If  the  file  identified  by  TERMINAL  Is  of  mode  IN _ FILE 
STATUS_  ERROR 

Is  raised  If  TERMINAL  Is  not  an  open  file  handle. 

DEVICE_  ERROR 

is  raised  if  an  input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system, 


Additional  Interface: 

procedure  tab  Cxi m>:  in  tabjenuneratidh  .=  horizontal  , 
COUNT :  in  POSITIVE  :=  1) 

ia 

begin 

TAB (CURREKT  OUm/r ,  KIND.  COUNT); 

end  tab  ; 


5. 3. 8.8.  Sounding  a  terminal  bell 

procedure  bell  (tern  I  HAL :  in  mfjrrpE); 

Purpose: 

This  procedure  sounds  the  bell  (beeper)  on  the  terminal  represented  by  the  output  terminal  Tile 
Identified  by  TERMINAL. 

Parameters: 

TERMINAL  Is  an  open  file  handle  on  an  output  terminal  file. 


Exceptions: 

USE_ERROR  is  raised  If  TERMINAL  Is  not  the  value  '  the  predefined  attribute  F!LE_KIND  or 
SCROLL  is  not  a  value  or  the  predefines  attribute  TBRMINAL_KIND  of  the  file 
node  associated  with  the  nie  Identified  by  the  parameter  TERMINAL. 

MODE _ ERROR 

Is  raised  If  the  file  Identified  by  TERMINAL  Is  of  mode  IN  __ FILE. 

STATUS  _  ERR  OR 

is  raised  If  TERMINAL  Is  not  an  open  file  handle. 

DEVICE  _  ERROR 

Is  raised  If  an  Input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 


Additional  Interfare: 
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procedure  BELL 

ia 

begin 

UPl.l  (aJRR£NT_OUmjT)  ; 
end  BELL; 


5. 3. 0.0.  Writing  to  the  terminaJ 

procedure  PUT  (TERRI  HAL:  tn  FILETTPE; 

ITER :  in  CHARACTER)  ; 

Purpose: 

This  procedure  writes  a  single  character  to  the  output  terminal  file  Identified  by  TERMINAL 
and  advances  the  active  position  by  one  column. 

Parameter: 

TERMINAL  Is  an  open  file  handle  on  an  output  terminal  file. 

ITEM  Is  the  character  to  be  written. 


Exceptions: 

USE_ ERROR  Is  raised  If  TERMINAL  Is  not  the  value  of  the  predefined  attribute  FILE_KIND  or 
SCROLL  Is  not  a  value  of  the  predefined  attribute  TERMINAL_KINT>  of  the  file 
node  associated  with  the  file  Identified  by  the  parameter  TERMINAL. 

MODE _ ERROR 

is  raised  If  the  file  Identified  by  TERMINAL  is  or  mode  IN _ FILE. 

STATUS_ ERROR 

Is  raised  If  TERMINAL  Is  not  an  open  file  handle. 

DEVICE  __  ERROR 

la  raised  If  an  Input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 


Additional  Interfaces: 

procedure  put  (iter,  in  character) 

ia 

begin 

PUT (CURR£jrr_OUTPUT .  ITER); 
end  PUT; 

procedure  put (TERRI nal:  in  file_TT?E; 

ITER:  in  STRING) 

is 

begin 

for  INDEX  in  ITER  'FIRST  ..  ITER  'LAST  loop 
PUT (TERMINAL,  ITER (INDEX) ) ; 
end  loop; 
end  PUT; 

procedure  put  (iter:  in  strinc) 

is 
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begin 

PUT  (CURREKT_OimVr,  na); 
end  put; 


Notes; 

After  a  character  Is  written  In  the  rightmost  position  of  a  row,  the  active  position  Is  the  first 
position  of  the  next  row. 


6.3.6.10.  Enabling  echo  on  a  terminal 


procedure  set_echo (terminal :  In  fil£_type; 

TO :  in  BOOLEAN  : =  TRUE) ; 


Purpose; 

This  procedure  establishes  whether  characters  which  appear  In  the  input  terminal  file  Identified 
by  TERMINAL  are  echoed  to  Its  associated  output  terminal  file.  When  TO  is  TRUE,  each 
character  Is  echoed  to  the  output  terminal  file.  When  TO  Is  FALSE,  each  character  which 
appears  In  the  input  terminal  file  Is  not  echoed  to  Its  associated  output  terminal  file. 


Parameters: 

TERMINAL  Is  an  open  file  handle  on  an  Input  terminal  file. 


TO  indicates  whether  or  not  to  echo  input  characters. 


Exceptions: 

USE_ ERROR  Is  raised  If  TERMINAL  Is  not  the  value  of  the  predefined  attribute  l’ILE_KIND  or 
SCROLL  Is  not  a  value  of  the  predefined  attribute  TERMINAL_KIND  or  the  file 
node  associated  with  the  file  Identified  by  the  parameter  TERMINAL. 

MODE_ ERROR 

Is  raised  If  the  file  Identified  by  TERMINAL  is  of  mode  OUT_FILE  or 
APPEND  _  FILE. 

STATUS _ ERROR 

Is  raised  If  TERMINAL  Is  not  an  open  file  handle. 

DEVICE_ERROR 

Is  raised  If  an  Input  or  output  operation  cannot  be  completed  because  of  a 
mall  unction  of  the  underlying  system. 


Additional  Interface: 

procedure  set  echo  (TO:  in  boolean  :«  true) 

is 

begin 

SET_ECHO(CURRENT_INPUT,  TO); 
end  SET  ECHO; 
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5.3.0.11.  Querying  echo  on  a  terminal 

function  ECHDCTERNINAL:  in  FILETYPE) 
return  boolean  ; 


Purpose: 

This  runctlon  returns  TRUE  If  echo  is  enabled;  otherwise  It  returns  FALSE. 

Parameters: 

TERMINAL  Is  an  open  file  handle  on  an  Input  terminal  file. 

Exceptions: 

USE_ERROR  Is  raised  If  TERMINAL  Is  not  the  value  of  the  predefined  attribute  FILE_KIND  or 
SCROLL  Is  not  a  value  of  the  predefined  attribute  TERMINAL_KIND  of  the  file 
node  associated  with  the  file  Identified  by  the  parameter  TERMINAL. 

MODE_ ERROR 

Is  raised  if  the  file  Identified  by  TERMINAL  Is  of  mode  OUT_FILE  or 
APPEND  _  FILE. 

STATUS _ ERROR 

Is  raised  if  TERMINAL  is  not  an  open  file  handle. 

DEVICE  _  ERROR 

Is  raised  If  an  Input  or  output  operation  cannot  be  completed  because  or  a 
malfunction  of  the  underlying  system. 


Additional  Interface: 

function  echo  return  boolean 

is 

begin 

return  echo (currentinput) ; 
end  ECHO; 


5.3.0.12.  Determining  the  number  of  function  keys 

function  maxinun_function_icet(terninal:  in  file  ttpe) 
retu  rn~  natural  ; _ 


Purpose: 

This  function  returns  the  maximum  function  key  identification  number  that  can  be  returned  by 
a  GET  operation  on  the  Input  terminal  file  Identified  by  TERMINAL. 

Parameters: 

TERMINAL  is  an  open  file  handle  on  an  Input  terminal  file. 

Exceptions: 

USE_ ERROR  Is  raised  If  TERMINAL  Is  not  the  value  of  the  predefined  aliribute  FILE  KIND  or 
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SCROLL  Is  not  a  value  of  the  predefined  attribute  TERMINAL_K1ND  of  the  file 
node  associated  with  the  file  Identified  by  the  parameter  TERMINAL. 

MODE _ ERROR 

Is  raised  If  the  file  Identified  by  TERMINAL  Is  of  mode  OUT  _ FILE  or 
APPEND  _  FILE 

STATUS  _  ERROR 

is  raised  if  TERMINAL  is  not  an  open  file  handle. 

DEVICE  _  ERROR 

is  raised  If  an  Input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 


Additional  Interface: 

function  maXIMum_functi on  jcey  return  ha  .-ral 

in 

begin 

return  MAXiKUV_FUNCTroN_)CEY  (current  vput); 
end  MAXIMUM  FUNCTION  KEY; 


5.3.0.13.  Reading  »  character  from  a  terminal 

procedure  get  (terminal  :  in  FILEJTYPE; 

ITEM:  OUt  CHARACTER; 

KEYS ;  out  FUNCTIOM JCEY_DESCRIPTOR)  ; 


Purpose: 

This  procedure  reads  either  a  single  character  Into  ITEM  or  a  single  function  key  identification 
number  into  KEYS  from  the  input  terminal  file  identified  by  TERMINAL. 

Parameters: 

TERMINAL  Is  an  open  file  handle  on  an  Input  terminal  file. 

ITEM  Is  the  character  that  was  read. 

KEYS  Is  the  description  of  the  function  key  identification  number  that  wa«  read. 


Exceptions: 

USE_ERROR  Is  raised  If  TERMINAL  Is  not  the  value  of  the  predefined  attribute  FILE_K1ND  or 
SCROLL  Is  not  a  value  of  the  predefined  attribute  TERMINAL_KIND  of  the  file 
node  associated  with  the  flic  Identified  by  the  parameter  TERMINAL. 

MODE_ ERROR 

Is  raised  If  the  file  Identified  by  TERMINAL  Is  of  mode  OUT  _  FILE  or 
APPEND  _  FILE. 

STATUS_ ERROR 

Is  raised  If  TEI.'MINAL  Is  not  an  open  file  handle. 
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DEVICE  _  ERROR 

Is  raised  If  an  Input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 


Additional  Interface: 

procedure  get  (item:  out  character  , 

KEYS:  OUt  FUNCTION  KEY  DESCRIPTOR) 

to 

begin 

GET (CURREXT_INPUT .  ITEM.  KEYS); 

end  get. 


Notes: 

This  procedure  will  only  return  function  key  Identification  numbers  in  KEYS  If  function  keys 
have  been  enabled  (see  Section  5.3.5.11).  Otherwise  the  characters  in  the  ASCiI  character 
sequence  representing  the  function  key  will  appear  one  at  a  time  In  ITEM. 


5.3.0.14.  Reading  all  available  characters  from  a  terminal 

procedure  GET (TERNINAL :  in  FILETYPE; 

ITEM:  out  STRING; 

LAST:  out  NATURAL; 

KEYS :  OUt  FUNCTION  KEY  DESCRIPTOR)  ; 


Purpose: 

This  procedure  successively  reads  characters  and  function  key  Identification  numbers  Into  ITEM 
and  KEYS  respectively,  until  either  all  positions  or  ITEM  or  KEYS  are  filled  or  there  are  no 
more  characters  available  In  the  Input  terminal  file.  Upon  completion.  LAST  contains  the  Index 
of  the  last  position  In  ITEM  to  contain  a  character  that  has  been  read. 

Parameters: 

TERMINAL  Is  an  open  file  handle  on  an  Input  terminal  file. 

ITEM  Is  the  string  of  characters  that  were  read. 

LAST  Is  the  position  of  the  last  character  read  In  ITEM. 

KEYS  Is  a  description  of  the  function  key  Identification  numbers  that  were  read. 

Exceptions: 

USE_  ERROR  Is  raised  If  TERMINAL  Is  not  the  value  of  the  predefined  attribute  FILE_KIND  or 
SCROLL  Is  not  a  value  of  the  predefined  attribute  TERM1NAL_KIND  of  the  file 
node  associated  with  the  file  Identified  by  the  parameter  TERMINAL. 

MOPE_ ERROR 

is  raised  If  the  file  Identified  by  TERMINAL  Is  of  mode  OUT_FILE  or 
APPEM>_  FILE. 

STATUS _ ERROR 

Is  raised  If  TERMINAL  Is  not  an  open  flic  handle. 
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DEVICE  _  ERROR 

is  raised  If  an  Input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 


Additional  Interface: 

procedure  GET  (ITEM:  out  STRING; 

LAST:  out  NATURAL ; 

KEYS :  OUt  FUNCTION  KEY  DESCRIPTOR) 

b 

begin 

GET (CURRENT_INFUT ,  ITEM,  LAST.  KEYS); 
end  GET; 


Notes: 

This  procedure  will  only  return  function  key  Identification  numbers  in  KEYS  If  function  keys 
have  been  enabled  (see  Section  5.3.5.11).  Otherwise  the  characters  in  the  ASCII  character 
sequence  representing  the  function  key  will  appear  in  ITEM.  If  there  are  no  elements  available 
for  reading  from  the  Input  terminal  file,  then  LAST  has  a  value  one  less  than  ITEM'FIRST  and 
FUNCTION _KEY_COUNT(KEYS)  (see  Section  5.3.8.15)  Is  equal  to  *ero. 

5.3.0.15.  Determining  the  number  of  function  keys  that  were  read 

function  function jceycount  (keys  ;  in  function  key  descriptor) 
return  natural; 


Purpose: 

This  function  returns  the  number  of  function  keys  described  In  KEYS. 
Parameters: 

KEYS  Is  the  function  key  descriptor  being  queried. 


Exceptions: 

None 


6.3.0.10.  Determining  function  key  usage 

In  FUNCTION  KEY  DESCRIPTaR; 

in  positive” 

out  POSITIVE; 
out  NATURAL)  ; 


procedure  function jcey  (KEYS : 

INDEX: 

KEY_IDEJfTIFIER: 

POSITION: 


Purpose: 

This  procedure  returns  the  identification  number  of  a  function  key  and  the  position  In  the  string 
(read  at  the  same  lime  as  the  function  keys)  of  the  character  following  the  function  key. 

Parameters: 

KEYS  Is  the  description  of  the  function  key  Identification  numbers  that  were  read 

INDEX  Is  the  Index  In  KEYS  of  the  function  key  to.  be  queried. 
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KEY_  IDENTIFIER 

Is  the  Identification  number  of  a  function  key. 

POSITION  Is  the  position  of  the  character  read  after  the  function  key. 


Exceptions: 

C0NSTRAINT_  ERROR 

Is  raised  If  INDEX  Is  greater  than  Fl>NCTION_KEY_COUNT(KEYS). 


5.3.0.17.  Determining  the  name  of  »  function  key 

FILE  TTPE; 
POSITIVE; 
out  STRING ; 
out  POSITIVE); 


procedure  function  jot  jure  (terminal:  in 

KET_H?EMTIFIER :  in 
KEYJtAME : 

LAST. 


Purpose: 

This  function  returns  (in  KEY__NAME)  the  s'-  ing  identification  of  the  fm  Mon  key  sequence 
designated  by  KEY _ IDENTIFIER.  It  also  returns  the  Index  of  the  la-  character  of  the 
function  key  name  In  LAST. 

Parameters: 

TERMINAL  Is  an  open  file  handle  on  an  Input  terminal  file. 

KEY_  IDENTIFIER 

Is  the  identification  number  of  a  function  key. 

KEY _  NAME  Is  the  name  of  the  key  designated  by  KEY_ IDENTIFIER. 

LAST  Is  the  position  In  KEY_NAME  of  the  last  character  of  the  function  key  name. 


Exceptions: 

USE_ERROR  Is  raised  If  TERMINAL  Is  not  the  value  of  the  predefined  attribute  FILE_KIND  or 
SCROLL  Is  not  a  value  of  the  predefined  attribute  TERMINAL __KIND  of  the  file 
node  associated  with  the  file  identified  by  the  parameter  TERMINAL. 

MODE _ ERROR 

Is  raised  If  the  file  Identified  by  TERMINAL  Is  of  mode  OlTT_FII.E  or 
APPEND  _FILE. 

STATUS_  ERROR 

Is  raised  If  TERMINAL  is  not  an  open  file  handle. 

DEVICE  _  ERROR 

Is  raised  If  an  Input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 

CONSTRAINT  _  ERROR 

Is  raised  If  the  value  of  KEY  IDENTIFIER  Is  greater  than 
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MAXIMUM _ FUNCTION  _ KEY(TERMINAL)  or  the  string  Identification  of  the 
function  key  sequence  is  longer  than  the  string  KEY_NAME 


Additional  Interface: 

procedure  function_key_nake 

(KEY_n>ENTIFIER  In  “  POSITIVE; 

KEYNAME:  out  STRING; 

LAST  .  OUt  POSITIVE) 

Is 

begin 

FUNCTION  KEY  NAME (CURRENT  INPUT. 

KEY_ID£NTIFIEJ«.  KEY  NAME.  LAST)  ; 
end  FUNCTION  KEY  NAME; 


6. 3.6.18.  Advancing  the  active  position  to  the  next  line 

procedure  NEWLINE  (TERMINAL:  In  FILE  TYPE; 

COUNT:  in  POSITIVE  :=  1); 


Purpose: 

This  procedure  advances  the  active  position  In  the  output  terminal  file  to  column  one,  COUNT 
lines  after  the  active  position. 

Parameters: 

TERMINAL  Is  an  open  file  handle  on  an  output  terminal  file. 

COUNT  is  the  number  of  lines  to  advance. 


Exceptions: 

USE_ERROR  Is  raised  If  TERMINAL  Is  not  the  valup  of  the  predefined  attribute  FILE_KIND  or 
SCROLL  Is  not  a  value  of  the  predefined  attribute  TERMINAL_KIND  of  the  file 
node  associated  with  the  file  Identified  by  the  parameter  TERMINAL. 

MODE _ ERROR 

Is  raised  ir  the  file  Identified  by  TERMINAL  Is  of  mode  IN_FILE. 

STATUS _ ERROR 

Is  raised  If  TERMINAL  Is  not  an  open  file  handle. 

DEVICE  _  ERROR 

Is  raised  If  an  Input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 


Additional  Interface: 

procedure  new  line  (count:  in  positive  :«  >) 

is 

begin 

NEW_LINE(CURRENT_OUTPUT,  COUNT); 
end  HE*  LINE; 
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5.3.6.10.  Advancing  the  active  position  to  the  next  page 
procedure  kct  pace  (tssmikal  :  In  FiLEjPfPE) ; 


Purpose: 

This  procedure  advances  the  active  position  In  the  output  terminal  file  to  the  first  column  of  the 
first  line  of  a  new  page. 

Parameters: 

TERMINAL  Is  an  open  file  handle  on  an  output  terminal  file. 


Exceptions: 

USE  ERROR  is  raised  If  TERMINAL  Is  not  the  value  of  the  predefined  attribute  FILE_K!ND  or 
SCROLL  Is  not  a  value  of  the  predefined  attribute  TERM!NAL_KIND  of  the  file 
node  associated  with  the  file  Identified  by  the  parameter  TERMINAL. 

MODE _ ERROR 

Is  raised  if  the  file  identified  by  TERMINAL  Is  of  mode  IN  _  FILE. 

ST ATUS_ ERROR 

Is  raised  If  TERMINAL  Is  not  an  open  file  handle. 

DEV1CE_  ERROR 

Is  raised  If  an  Input  or  output  operation  cannot  be  completed  because  or  a 
malfunction  of  the  underlying  system. 

Additional  Interface: 

procedure  REVPAGE 

is 

begin 

RERPAGE (CURREKTOUTPUT) ; 

end  «E«  page: 


5.3.7.  Package  PAGE— TERMINAL 

This  package  provides  the  functionality  of  a  page  terminal.  A  page  terminal  consists  of  two  devices: 
an  Input  device  (keyboard)  and  an  associated  output  device  (display).  A  page  terminal  may  be 
accessed  either  as  a  single  file  of  mode  INOUT_FILE  or  as  two  files:  one  of  mode  IN_FILE  (the 
keyboard)  and  the  other  of  mode  OUT_FELE  (the  display).  As  keys  are  pressed  on  the  page  terminal 
keyboard.  the  transmitted  characters  are  made  available  for  reading  by  the 
CAJS.PAGE_  TERMINAL  package.  As  characters  are  written  to  the  page  terminal  file,  they  are 
displayed  on  the  output  device. 

The  display  for  a  page  terminal  has  positions  In  which  printable  ASCII  characters  may  Ik-  graphically 
displayed.  The  positions  arc  arranged  Into  horliont&l  rows  and  vertical  columns.  Each  iiosition  Is 
Identifiable  by  the  combination  of  a  row  number  and  a  column  number.  A  display  has  a  fixed  number 
of  rows  and  columns.  The  rows  and  columns  of  a  display  are  Identified  by  positive  numbers.  The 
rows  are  Incrementally  Indexed  starting  with  one  at  the  top  of  the  display.  The  columns  are 
Incrementally  Indexed  starting  with  one  at  the  left  side  of  the  display. 


M4 


PROPOSE!'  MII.-kT(m  VI- 
31  J  VM  VRV  inti’. 


The  active  position  on  the  display  of  a  page  terminal  is  the  position  at  which  the  next  operation  will 
be  performed.  The  active  position  is  said  to  advance  if  (1)  the  row  number  of  the  new  position  is 
greater  than  the  row  number  of  the  old  position  or  (2)  the  row  number  of  the  new  position  Is  the  same 
as  the  row  number  of  the  old  position  and  the  new  position  has  a  greater  column  number.  Similarly,  a 
position  is  said  to  precede  the  active  position  If  (1)  the  row  number  of  the  position  Is  less  than  the  row 
number  of  the  active  position  or  (2)  the  row  number  of  the  position  is  the  same  as  the  row  number  of 
the  active  position  and  the  column  number  of  the  position  Is  smaller  than  the  column  number  of  the 
active  position. 


5.3.7. 1.  Types,  subtypes  and  Constanta 

aubtype  FILE_TYP£  is  CAIS .  IQ_DEFIMITIQI(S .  FILE_TYPE , 

subtype  functiom_key_descriptor  U 

CAIS .  IO_DEFINfTIONS .  FUNCTION  JtEYJJESCRIPTOR ; 

aubtype  position_type  ia  cais.io_defiwitions.position_type; 
aubtype  tabemumeration  ia  cais.  redefinitions.  tab_enumeration; 

type  SELECT  ENUMERATION  ia 

(FRON_ACTrVE_POSITION_TO_END . 

FRQM~ST ART  TO  ACTTVE  PoiniOR  , 

ALLPOSITIOHSr ; 

type  GRAPHI C_REND ITI ONENUKERAT ION  ia 
(PRIMARY  RENDITION. 

BOLD. 

FAINT, 

UNDERSCORE. 

SLOW  BLINK, 

RAPIDBLINK. 

REVERSE  I MACE ) ; 

type  graphicaenditionarray  ia  array  (graphic  rendition  enuneratidn) 

of  BOOLEAN; 

default  graphic  rendition  ;  constant  GRAPHI C_REND ITI on_array 

:=  (PRIMARYRENDITION  =>  TRUE,  BOLD . . REVERSEIMAGE  *>  FALSE); 

FILE_TYPE  describes  the  type  Tor  file  handles.  FUNCTION _KEY_ DESCRIPTOR  Is  used  to 
obtain  Information  about  function  keys  read  from  a  terminal.  POSITION_TYPE  describes  the  type 
of  a  position  on  a  terminal.  TAB_  ENUMERATION  is  used  to  specify  the  kind  of  tab  stop  to  be  set. 
SELECT  _  ENUMERATION  is  used  In  ERASE  _  IN  _  DISPLAY  and  ERASE  _  IN  _  LINE  to 
determine  the  portion  of  the  display  or  line  to  be  erased. 
GRAP!fIC_  RENDITION  _  ENUMERATION.  GRAPHIC  _  RENDITION  _  ARRAY.  and 

DEFAULT_GRAPHlC_RENDITION  are  used  to  determine  display  characteristics  of  printable 
characters. 


5.S.7.2.  Setting  the  active  position 

procedure  set_position (terminal  :  in  file_ttpe; 

POSITION  ;  in  POSITION  TYPE) ; 


Purpose: 

This  procedure  advances  the  active  position  to  the  specified  POSITION  on  the  output  terminal 
file  Identified  by  TERMINAL. 
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Parameters: 

TERMINAL  Is  an  0[>en  file  handle  on  an  output  terminal  file. 

POSITION  Is  the  new  active  position  In  the  output  terminal  Hie. 


Exceptions: 

USE_ERROR  Is  raised  If  TERMINAL  Is  not  the  value  of  the  predefined  attribute  FILE_KIND 
or  PAGE  Is  not  a  value  of  the  predefined  attribute  TERMINAL_KIND  of  the  file 
node  associated  with  the  file  Identified  by  the  parameter  TERMINAL. 

MODE _ ERROR 

is  raised  If  the  file  Identified  by  TERMINAL  Is  of  mode  IN_FELE. 

STATUS _ ERROR 

Is  raised  If  TERMINAL  Is  not  an  open  file  handle. 

LAYOUT  _  ERR  OR 

Is  raised  If  the  position  does  not  exist  on  the  terminal. 

DEV1CE_  ERROR 

Is  raised  If  an  Input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 


Additional  Interface: 

procedure  set_positiqh  (position  .  In  position  _vn*E> 

is 

begin 

sFr_posmoR(cuRRE)fT_otmvr.  position)  ; 
end  set  position. 


S.3.7.3.  Determining  the  active  position 

function  err_Posmoii  (terminal  :  In  fiee  ttpe) 
return  POSITIONTTPE; 

Purpose 

This  function  returns  the  active  position  of  the  outpn  terminal  file  Identified  by  TERMINAL 
Parameters: 

TERMINAL  Is  an  open  file  handle  on  an  output  terminal  file. 


Exceptions: 

USE_ERROR  Is  raised  If  TERMINAL  Is  not  the  value  of  the  predefined  attribute  FILE_KIND 
or  PAGE  Is  not  a  value  of  the  predefined  attribute  TERMINAL_KIND  of  the  file 
node  associated  with  the  We  Identified  by  *he  parameter  TERMINAL. 

MODE  ERROR 

Is  raised  If  the  flic  Identified  by  TERMINAL  Is  of  mode  IN  FILE. 
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STATUS  _ERROR 

is  raised  If  TERMINAL  is  not  an  open  file  handle. 

DEVICE_  ERROR 

is  raised  if  an  input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 

Additional  Interface: 

function  err  position  return  position  ttpe 

to 

begin 

return  GET_PosiTiON(cuwt£jrr_otm>UT) ; 
end  GET  POSITION; 


S.3.7.4.  Determining  the  aiie  of  the  terminal 

function  TERMINALSIZE (TERMINAL  :  in  FILE_TYPE) 
return  position_ttpe  . 

Purpose: 

This  function  returns  the  maximum  row  and  maximum  column  of  the  output  terminal  rile 
Identified  by  TERMINAL. 

Parameters: 

TERMINAL  Is  an  open  file  handle  on  a  terminal  file. 


Exceptions: 

USE_ERROR  Is  raised  If  TERMINAL  Is  not  the  value  of  the  predefined  attribute  FrLE_KIND 
or  PAGE  Is  not  a  value  of  the  predefined  attribute  TERMINAL  _KIND  of  the  file 
node  associated  with  the  file  identified  by  the  parameter  TERMINAL 

MODE _ ERROR 

Is  raised  If  the  file  Identified  by  TERMINAL  Is  of  mode  l\_FILE. 

STATUS _ ERROR 

Is  raised  If  TERMINAL  Is  not  an  open  file  handle. 

DEVICE  _  ERROR 

Is  raised  If  an  Input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 


Additional  Interface: 

function  terminalsize 

return  position  type 

to 

begin 

return  TERMINALSIZEICURRENTOVTFUT)  ; 
end  TERMINAL  SIZE; 
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5. 3.7. 5.  Setting  a  tab  stop 

procedure  set_tab (term i nal  :  In  file  type; 

KIND  :  In  TAB  ENUHHUTION  :=  HORIZONTAL) ; 


Purpose: 

This  procedure  establishes  a  horizontal  tab  stop  at  the  column  or  the  active  position  If  KIND  Is 
HORIZONTAL,  or  a  vertical  tab  stop  at  the  row  of  the  active  position  if  KIND  Is  VERTICAL, 

Parameters: 

TERMINAL  is  an  open  file  handle  on  a  terminal  file. 

KIND  is  the  kind  (horizontal  or  vertical)  of  tab  to  be  set. 


Exceptions: 

USE_ ERROR  Is  raised  If  TERMINAL  Is  not  the  value  of  the  predefined  attribute  FILE_KIND 
or  PAGE  Is  not  a  value  of  the  predefined  attribute  TERMINAL_KIND  of  the  file 
node  associated  with  the  file  Identified  by  the  parameter  TERMINAL. 

MODE _ ERROR 

Is  raised  If  the  file  identified  by  TERMINAL  Is  of  mode  IN_FII.E. 

STATUS _ ERROR 

Is  raised  If  the  file  Identified  by  TERMINAL  Is  not  an  open  rile  handle. 

DEVICE  _ERROR 

Is  raised  If  an  Input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 


Additional  Interface: 

procedure  set  tab  (kind  :  in  tabenumeration  =  horizontal) 

ia 

begin 

SET_TAB (CURRENT_OUTPUT .  KIND); 
end  set ~TAB; 


5. 3.7. 6.  Clearing  a  tab  atop 

procedure  clear_tab (terminal  :  in  file_ttpe; 

KIND  :  in  TAB_ENUNERATION  :=  HORIZONTAL); 

Purpose: 

This  procedure  removes  a  horizontal  tab  stop  from  the  column  of  the  active  position  If  KIND  Is 
HORIZONTAL  or  a  VERTICAL  tab  stop  from  the  row  of  the  active  position  If  KIND  is 
VERTICAL. 

Parameters: 


TERMINAL  Is  an  open  file  handle  on  a  terminal  file. 
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MODE  _ ERROR 

Is  raised  li  the  file  Identified  by  TERMINAL  Is  of  mode  IN_FILE. 

STATUS_ ERROR 

Is  raised  If  TERMINAL  is  not  an  open  file  handle. 

DEVICE  _  ERROR 

Is  raised  If  an  Input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 


Additional  Interface: 

procedure  erase_in_line (selection :  la  select_enumeration) 

is 

begin 

ERASE_INJ.INE(CTJRRENT_OUTPVT,  SELECTION); 
end  ERASE  IN  LINE; 


5.3.7.23.  Inserting  space  characters  in  a  line 

procedure  insertspace (terminal:  in  file  ttpe; 

COUNT:  in  POSITIVE  :=  1) ; 


Purpose: 

This  procedure  Inserts  COUNT  space  characters  Into  the  active  line  at  the  active  position.  The 
character  at  the  active  position  and  adjacent  characters  are  shirted  to  the  right.  The  COUNT 
rightmost  characters  on  the  line  are  lost.  The  active  position  Is  not  changed. 

Parameters: 

TERMINAL  Is  an  open  file  handle  on  an  output  terminal  file. 

COUNT  Is  the  number  of  space  characters  to  be  Inserted. 

Exceptions: 

USE_  ERROR  Is  raised  If  TERMINAL  Is  not  the  value  of  the  predefined  attribute  FILE_KIND 
or  PAGE  Is  not  a  value  of  the  predefined  attribute  TERMINAL_KIND  of  the  file 
node  associated  with  the  file  Identified  by  the  parameter  TERMINAL,  or  If  the 
value  or  COUNT  Is  greater  than  the  number  of  columns  Including  and  following  the 
active  position. 

MODE _ ERROR 

Is  raised  If  the  file  Identified  by  TERMINAL  Is  of  mode  IN _ FILE. 

ST  ATUS  _  ERROR 

Is  raised  If  TERMINAL  is  not  an  open  file  handle. 

DEVICE_  ERROR 

Is  raised  If  an  Input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 
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TERMINAL  Is  an  open  file  handle  on  an  output  terminal  file. 

SELECTION  Is  the  portion  of  the  display  to  be  erased. 

Exceptions: 

USE_ERROR  Is  raised  If  TERMINAL  Is  not  the  value  of  the  predenned  attribute  FILE_K1ND 
or  PAGE  is  not  a  value  of  the  predenned  attribute  TERMINAL_KIND  of  the  Hie 
node  associated  with  the  file  Identtned  by  the  parameter  TERMINAL. 

MODE  ERROR 

Is  raised  If  the  nie  Identtned  by  TERMINAL  Is  of  mode  IN _  FILE. 

STATUS _ ERROR 

is  raised  If  TERMINAL  Is  not  an  open  nie  handle. 

DEVICE  _  ERROR 

Is  raised  If  an  Input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 


Additional  Interface: 

procedure  eraseindisplay  (selection  :  In  selectenuveration) 

ia 

begin 

ERASE_IN_DISPLAY(CURR£N7_0imVT.  SELECTION): 
end  eraseindisplaY; 


5.3.7.22.  Erasing  characters  in  a  line 

procedure  erase  in  line (terminal  In  file  type; 

SELECTION.  in  SELECT  ENUMERATION) . 


Purpose: 

This  procedure  erases  the  characters  In  the  active  line  as  delermii  od  by  the  active  position  and 
the  given  SELECTION  (including  the  active  position).  After  erasure  erased  posh  Ions  have  space 
characters.  The  active  position  is  not  changed. 

Parameters: 

TERMINAL  is  an  open  file  handle  on  an  output  terminal  file. 

SELECTION  is  the  portion  of  the  line  to  be  erased. 

Exceptions: 

t'SE_  ERROR  Is  raised  ir  TERMINAL  Is  not  the  value  or  the  predefined  attribute  FILE_  KIND 
or  PAGE  Is  not  a  value  of  the  predefined  attribute  TERMINAL_KINI)  of  the  file 
node  associated  with  the  file  Identified  by  the  parameter  TERMINAL,  or  If  the 
value  of  COUNT  Is  greater  than  the  number  of  columns  Including  and  following  the 
active  position. 
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5.3.7.20.  Erasing  character;  in  a  line 

procedure  EXasechaaacter  (terminal  :  in  file_type  ; 

COURT:  in  POSITIVE  :=  1): 

Purpose: 

This  procedure  replaces  COUNT  characters  on  the  active  line  with  space  characters  starting  at 
the  active  position  and  advancing  toward  the  end  position.  The  active  position  is  not  changed. 

Parameters: 

TERMINAL  Is  an  open  Hie  handle  on  an  output  terminal  file. 

COUNT  Is  the  number  of  characters  to  be  erased 

Exceptions: 

USE_ERROR  is  raised  If  TERMINAL  is  not  the  value  of  the  predefined  attribute  FILE_KIND 
or  PAGE  Is  not  a  value  of  the  predefined  attribute  TERMINAL_KINI>  of  the  file 
node  associated  with  the  file  Identified  by  the  parameter  TERMINAL,  or  If  the 
value  of  COUNT  Is  greater  than  the  number  of  positions  in  the  active  line  including 
and  after  the  active  position. 

MODE _ ERROR 

is  raised  If  the  file  identified  by  TERMINAL  to  of  mode  IN _ FILE. 

STATUS  _  ERROR 

Is  raised  if  the  file  Identified  by  TERMINAL  is  not  an  open  file  handle. 

DEVICE_  ERROR 

Is  raised  If  an  Input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 

Additional  Interaces: 

procedure  erase  character  (court  :  in  positive  :-i) 

k 

begin 

ERASECHARACTER  (CURREHT_OUTFUT ,  COURT)  ; 
end  ERASE_CHARACTER; 


5.3.7.21.  Eraaing  characters  in  a  display 

procedure  erase_ih_displaycterhihal.-  in  file_ttte; 

SELECTION ;  in  SELECT  ENUMERATION); 


Purpose: 

This  procedure  erases  the  characters  in  the  display  as  determined  by  the  active  position  and  the 
given  SELECTION  (Including  the  active  position).  After  erasure  erased  positions  have  space 
characters.  The  active  position  is  not  changed. 

Parameters: 
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Additional  interface: 

procedure  delete  character  (ctanrr .  in  positive  :*i) 

is 

begin 

DELETE  CHARACTER C CURR£NT_OUTPUT ,  COUNT); 
end  DELETE  CHARACTER; 


8.3.7.10.  Deleting  lines 

procedure  delete_line (terminal :  in  file_ttpe; 

COUNT:  in  POSITIVE : =1) ; 


Purpose: 

This  procedure  deletes  COUNT  lines  starting  at  the  active  position  and  advancing  toward  the 
end  position.  Adjacent  lines  are  shifted  from  the  bottom  toward  the  active  position.  Open  space 
at  the  bottom  of  the  display  Is  filled  with  erased  lines.  The  active  position  is  not  changed. 

Parameters: 

TERMINAL  is  an  open  file  handle  on  an  output  terminal  file. 

COUNT  Is  the  number  of  lines  to  be  deleted. 


Exceptions: 

USE _ ERROR  Is  raised  If  TERMINAL  Is  not  the  value  of  the  predefined  attribute  FILE_KIND 
or  PAGE  la  not  a  value  of  the  predefined  attribute  TERMINAL  _KIND  of  the  file 
node  associated  with  the  file  Identified  by  the  parameter  TERMINAL,  or  ir  the 
value  of  COUNT  is  greater  than  the  number  of  rows  Including  and  following  the 
active  position. 

MODE _ ERROR 

is  raised  If  the  file  identified  by  TERMINAL  Is  of  mode  IN _ FILE. 

STATUS _ ERROR 

Is  raised  if  TERMINAL  Is  not  an  open  file  handle. 

DEV!CE_  ERROR 

Is  raised  If  an  Input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 


Additional  Interface: 

procedure  delete  line  (count,  in  positive  :*  i) 

is 

begin 

DELETE  LINE  (CURRENT  OUTPUT.  COUNT); 
end  DELETE  LINE; 
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DEV1CE_  ERROR 

is  raised  if  an  input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 

CONSTRAINT  _  ERROR 

is  raised  if  the  value  of  KEY  _  IDENTIFIER  to  greater  than 
MAXIMUM _FUNCTION_KEY(TERMINAL)  or  the  string  identification  of  the 
function  key  sequence  is  longer  that  the  string  KEY  _  NAME. 


Additional  Interface: 

procedure  functi Onketkame  (KEY_n>EimriER  :  in  positive; 

KET  HMG  :  Out  STRING. 

LAST  :  OUt  POSITIVE;) 

i* 

begin 

FtrHCTIO»_Krr_ltAME  (CUWENT_INPUT . 

KEY_n>afTiriER.  KEY  KANE ,  LAST); 

end  function  key  name. 


5.3.7.18.  Deleting  characters 

procedure  deletf.character (tbkmi ral ;  in  file  type; 

COUNT:  in  POSITIVE  :  =  1) ; 


Purpose: 

This  procedure  deletes  COUNT  characters  on  the  active  line  starting  at  the  active  position  and 
advancing  toward  the  end  position.  Adjacent  characters  to  the  right  or  the  active  position  are 
shifted  lert.  Open  space  on  the  right  Is  filled  with  space  characters.  The  active  position  Is  not 
changed. 

Parameters: 

TERMINAL  Is  an  open  file  handle  on  an  output  terminal  file. 

COUNT  Is  the  number  of  characters  to  be  deleted. 

Exceptions: 

USE_ERROR  is  raised  If  TERMINAL  Is  not  the  value  or  the  predefined  attribute  FILE_KIND 
or  PAGE  Is  not  a  value  of  the  predefined  attribute  TERMINAL_KIND  of  the  file 
node  associated  with  the  file  Identified  by  the  parameter  TERMINAL,  or  If  the 
value  of  COUNT  Is  greater  than  the  number  of  positions  In  the  active  line  Including 
and  following  the  active  position. 

MODE _ ERROR 

Is  raised  If  TERMINAL  is  of  mode  IN  _ FILE. 

STATUS _ ERROR 

Is  raised  If  the  file  Identified  by  TERMINAL  Is  not  an  open  file  handle. 

D  EVICE  _  ERROR 

Is  raised  If  an  input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 
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Parameters: 

KEYS  is  the  description  of  the  function  key  numbers  that  were  read. 

INDEX  is  the  index  in  KEYS  of  the  function  key  to  be  queried. 

KEY  _  IDENTIFIER 

Is  the  identification  number  of  a  function  key. 

POSITION  is  the  position  of  the  character  read  after  the  function  key. 


Exceptions: 

CONSTRAINT  _  ERROR 

is  raised  If  INDEX  is  greater  than  FUNCTION_KEY_COUNT(KEYS)  . 


5.3.7.17.  Determining  the  name  of  a  function  key 


procedure  Function jcrrjuuiE (termikal 

KEY  XSENTIFIOt 

key'iiame 

LAST 


in  FILETYPE. 
in  POSITIVE; 
out  SntlNG; 
out  POSITIVE) ; 


Purpose: 

This  function  returns  (In  KEY_NAME)  the  string  Identification  of  the  function  key  designated 
by  KEY_  IDENTIFIER.  It  also  returns  the  index  of  the  last  character  or  the  function  key  name 
in  LAST. 

Parameters: 

TERMINAL  is  an  open  file  handle  on  an  Input  terminal  file. 

KEY  _  IDENTIFIER 

is  the  Identification  number  of  a  function  key. 

KEY  NAME  is  the  name  of  the  key  designated  by  KEY_  IDENTIFIER. 

LAST  is  the  position  In  KEY_NAME  of  the  last  character  of  the  function  key  name. 


Exceptions: 

USE_ERROR  Is  raised  If  TERMINAL  is  not  the  value  of  the  predefined  attribute  FILE_KIND  or 
PAGE  is  not  a  value  of  the  predefined  attribute  TERMINAL_KIND  of  the  file 
node  associated  with  the  file  Identified  by  the  parameter  TERMINAL. 

MODE_ ERROR 

is  raised  If  the  file  Identified  by  TERMINAL  Is  of  mode  OUT _ FILE  or 
APPEND  _  FILE. 

STATUS  _  ERROR 

Is  raised  If  TERMINAL  Is  not  an  open  file  handle. 
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is  raised  if  the  file  identified  by  TERMINAL  is  of  mode  OUT  _  FILE  or 
APPEND  _  FILE. 

STATUS_ ERROR 

Is  raised  if  TERMINAL  Is  not  an  open  file  handle. 

DEVICE  _  ERROR 

is  raised  If  an  Input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 


Additional  Interface: 

procedure  GET  (ITEM  :  out  STRING: 

LAST  :  OUt  NATURAL: 

KEYS  :  OUt  FUNCTION_KEY_DESCRIPTOR) 

is 

begin 

CETCCURRENTINPUT.  ITEM.  LAST,  KEYS); 
end  GET; 


Notes: 

This  procedure  will  only  return  function  key  identification  numbers  In  KEYS  If  function  keys 
have  been  enabled  (see  Section  5.3.5.11;.  Otherwise  the  characters  In  the  ASCII  character 
sequence  representing  the  function  key  will  appear  in  ITEM.  If  there  are  no  elements  available 
for  reading  from  the  Input  terminal  file,  then  LAST  has  a  value  one  less  than  ITEM’FIRST  and 
FUNCTION _ KEY  COUNT(KEYS)  (see  Section  5.3.7.15)  Is  equal  to  *ero. 


5.3.7.15.  Determining  the  number  of  function  keys  that  were  read 

function  function jcEY_cowrr  (keys  :  in  function  key  descriptor) 
return  natural, 


Purpose: 

This  function  returns  the  number  of  function  keys  described  In  KEYS. 
Parameters: 

KEYS  Is  the  function  key  descriptor  being  queried. 


Exceptions: 

None 


5.3.7.10.  Determining  function  ltey  usage 


procedure  functi on_key (keys 
index 

KEYIDEMTIFIER 

POSITION 


:  In  FUNCTION_KEY_DESCRIPTOR; 
In  POSITIVE f 
out  POSITIVE: 
out  NATURAL); 


Purpose: 

This  procedure  returns  the  Identification  number  of  a  function  key  and  the  position  In  the  string 
(read  at  the  same  time  as  the  fund1  n  keys)  of  the  character  following  the  function  key. 


PROPOSED  MIl^TIX  \l>- 
31  JAMAR'i  I  OR', 


STATl'S_ERR'  It 

I-  r&Jsed  If  TERMINAL  Is  not  an  open  file  handle. 

DEVICE  _  ERROR 

Is  raised  If  an  Input  or  output  operation  cannot  be  completed  because  of  a 
ma  function  of  the  underlying  system. 


Additional  Interface: 

procedure  set  (item  :  out  character; 

KEYS  :  OUt  FUNCTION  KEY  DESCRIPTOR) 

is 

begin 

SET (CURREjrr_INPUT ,  ITEM.  KEYS); 
end  SET; 


Notes: 

This  procedure  will  only  return  function  key  Identification  numbers  In  KEYS  If  function  keys 
have  been  enabled  (see  Section  5.3.5.12).  Otherwise  the  characters  in  the  ASCII  character 
sequence  representing  the  function  key  will  appear  one  at  a  time  In  ITEM. 


5.3.7.14.  Reading  >11  available  characters  from  a  terminal 

procedure  GET  (terminal  :  in  FILE  TYPE; 

ITEM  OUt  STRING, 

LAST  OUt  NATURAL; 

KEYS  OUt  FUMCTIDM_KEY_DESCRIPnM)  ; 


Purpose: 

This  procedure  successively  reads  characters  and  function  key  Identification  numbers  Into  ITEM 
and  KEYS  respectively  until  either  all  positions  of  ITEM  or  KEYS  are  filled  or  there  are  no 
more  characters  available  In  the  Input  terminal  file.  Upon  completion,  LAST  contains  the  index 
of  the  last  position  In  ITEM  to  contain  a  character  that  has  been  read. 

Parameters: 

TERMINAL  Is  an  open  file  handle  on  an  Input  terminal  file. 

ITEM  Is  a  string  of  the  characters  that  were  read. 

LAST  Is  the  position  of  the  last  character  read  In  ITEM. 

KEYS  Is  the  description  of  the  function  key  Identification  numbers  that  were  read. 

Exceptions: 

USE_ ERROR  Is  raised  If  the  file  Identified  by  TERMINAL  Is  not  the  value  of  the  predefined 
attribute  FILE_K!ND  or  PAGE  Is  not  a  value  of  the  predefined  attribute 
TERMINAL__KIND  of  the  file  node  associated  with  the  file  Identified  by  the 
parameter  TERMINAL. 
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USE_ ERROR  Is  raised  If  TERMINAL  Is  not  the  value  of  the  predefined  attribute  FILE_KIND 
or  PAGE  Is  not  a  value  of  the  predefined  attribute  TERMINAL_KIND  of  the  file 
node  associated  with  the  file  Identified  by  the  parameter  TERMINAL. 

MODE _ ERROR 

Is  raised  If  the  file  Identified  by  TERMINAL  Is  of  mode  OUT_FILE  or 
APPEND  _  FILE. 

STATUS _ ERROR 

Is  raised  If  TERMINAL  Is  not  an  open  file  handle. 

DEV1CE_  ERROR 

Is  raised  If  an  Input  or  output  operation  cannot  be  completed  bee:  use  of  a 
malfunction  of  the  underlying  system. 


Additional  Interface: 

function  uaximum_function_key 
return  natural 

is 

begin 

return  kaxinun_function_icey  (current_ikput) ; 
end  uaximum  function  key; 


6.3.7.13.  Rending  a  character  from  *  terminal 

procedure  GET  (TERMINAL  :  in  FILETYPE; 

ITEM  out  CHARACTER; 

KEYS  out  FUNCTION  KEY  DESCRIPTOR)  ; 


Purpose; 

This  procedure  reads  either  a  single  character  Into  ITEM  or  a  single  function  key  Identification 
number  Into  KEYS  from  the  Input  terminal  file  Identified  by  TERMINAL. 


Parameters: 

TERMINAL  is  an  open  file  handle  on  an  input  terminal  file. 
ITEM  Is  the  character  that  was  read. 

KEYS  describes  the  function  key  that  was  read. 


Exceptions: 

USE_ ERROR  is  raised  If  TERMINAL  Is  not  the  value  of  the  predefined  attribute  F!LE_KIND 
or  PAGE  is  not  a  value  of  the  predefined  attribute  TERMINAL _ KIND  of  the  file 
node  associated  with  the  file  identified  by  the  parameter  TERMINAL. 

MODK_  ERROR 

Is  raised  If  the  file  identified  by  TERMINAL  is  of  mode  OUT_FILK  or 
APPEND  FfLE. 
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5.3.7.11.  Querying  echo  on  a  terminal 

function  taro  (terminal  :  in  file_ttpe) 
return  boolean; 


Purpose: 

This  function  returns  TRUE  If  echo  Is  enabled;  otherwise  It  returns  FALSE. 


Parameters: 

TERMINAL  Is  an  open  file  handle  on  an  Input  terminal  file. 


Exceptions: 

USE _ ERROR  is  raised  If  TERMINAL  Is  not  the  value  of  the  predefined  attribute  FILE_KIND 
or  PAGE  Is  not  a  value  of  the  predefined  attribute  TERMINAL_KIND  of  the  file 
node  associat  ’d  with  the  file  Identified  by  the  parameter  TERMINAL. 

MODE_ ERROR 

is  raised  If  the  file  Identified  by  TERMINAL  Is  of  mode  OUT _  FILE  or 
APPEND  _  FILE. 

STATUS _ ERROR 

Is  rtu%4  if  TERMINAL  Is  not  an  open  file  handle. 

DEVICE  _  ERROR 

Is  raised  if  an  Input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 


Additional  Interface: 

function  echo 

return  boolean 

is 

begin 

return  echo  (currentinfut)  ; 
end  echo; 


5.3.7.12.  Determining  the  number  of  function  keye 

function  naximun_function_icey(terninal  ;  in  file_type) 
return  natural; 


Purpose: 

This  function  returns  the  maximum  function  key  Identification  number  that  can  be  returned  by 
a  GET  operation  In  the  input  terminal  file  Identified  by  TERMINAL. 

Parameters: 

TERMINAL  is  an  open  file  handle  on  an  Input  terminal  file. 


Exceptions: 
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Notes: 

After  a  character  Is  written  In  the  rightmost  position  of  a  row,  the  active  position  Is  the  first 
position  of  the  next  row. 

6.3.7.10.  Enabling  echo  on  a  terminal 

procedure  set_echd (terminal  :  in  file  type. 

“to  :  in  BOOLEAN  : =  TRUE) ; 


Purpose: 

This  procedure  establishes  whether  characters  which  appear  In  the  Input  terminal  flic  identified 
by  TERMINAL  are  echoed  to  Its  associated  output  terminal  file.  When  TO  Is  TRUE,  each 
character  which  appears  In  the  Input  terminal  file  is  echoed  to  the  output  terminal  flic.  When 
TO  Is  FALSE,  each  character  which  appears  In  the  Input  terminal  file  Is  not  echoed  to  Its 
associated  output  terminal  file. 

Parameters: 

TERMINAL  Is  an  open  file  handle  on  an  input  terminal  file. 

TO  Indicates  whether  or  not  to  echo  Input  characters. 


Exceptions: 

USE _ ERROR  Is  raised  ir  TERMINAL  is  not  the  value  of  the  predefined  attribute  FILE _ KIND 
or  PAGE  Is  not  a  value  of  the  predefined  attribute  TERMINAL  __KIND  of  the  file 
node  associated  with  the  file  Identified  by  the  parameter  TERMINAL. 

MODE _ ERROR 

Is  raised  If  the  rile  identified  by  TERMINAL  Is  or  mode  OUT_FILE  or 
APPEND  _  FILE 

STATUS _ ERROR 

Is  raised  If  TERMINAL.  Is  not  an  open  file  handle. 

DEVICE  _  ERROR 

Is  raised  If  an  Input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 


Additional  Interface: 

procedure  set  echo'-d  :  in  boolean  TRUE) 

is 

begin 

SET_ECHO(CURREirr_mPirT,  TO); 
end  SET  ECHO; 
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end  bell. 


S.3.7.0.  Writing  to  the  terminal 

procedure  put (terminal  :  in  filejttpe; 

ITEM  :  in  CHARACTER) ; 

Purpose: 

This  procedure  writes  a  single  character  to  the  output  terminal  file  Identified  by  TERMINAL 
and  advances  the  active  position  by  one  column. 

Parameter. 

TERMINAL  Is  an  open  file  handle  on  an  output  terminal  file. 

ITEM  Is  the  character  to  be  written. 


Exceptions: 

USE_ERROR  Is  raised  If  TERMINAL  Is  not  the  value  of  the  predefined  attribute  FfLE_KIND  or 
PAGE  Is  not  a  value  of  the  predefined  attribute  TERM1NAL_KIND  of  the  file 
node  associated  with  the  file  Identified  by  the  parameter  TERMINAL. 

MODE_ERROR 

is  raised  If  the  file  identified  by  TERMINAL  Is  of  mode  IN  _  FILE. 

STATUS _ ERROR 

is  raised  If  TERMINAL  Is  not  an  open  file  handle. 

DEV1CE_  ERROR 

is  raised  If  an  Input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 


Additional  Interfaces: 

procedure  PUT  C ITER  :  in  character) 

to 

begin 

PUT (CURR£NT_OUTPUT .  ITEM); 

end  put; 

procedure  pvt  (terminal  :  in  file_ttpe; 

ITEM  :  in  STRING) 

to 

begin 

for  INDEX  in  ITEM' FIRST  ..  ITER  'LAST  loop 
PUT (TERMINAL.  ITEM (INDEX) ) ; 
end  loop; 
end  PUT; 

procedure  PUT  (ITEM  .  In  STRING) 
to 

begin 

PUT (CURRE)fT_OUTPUT,  ITEM); 
end  PUT; 
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MODE _ ERROR 

is  raised  if  the  file  Identified  by  TERMINAL  Is  of  mode  IN _ FILE. 

STATUS_  ERROR 

is  raised  If  the  file  identified  by  TERMINAL  Is  not  an  open  file  handle. 

DEVICE  _  ERR  OR 

Is  raised  If  an  input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 


Additional  Interface: 

procedure  TAB  (KIND  :  in  TAB_EHlWERATION  :=  HORIZONTAL; 
COUNT  :  In  POSITIVE  :  =  1); 


begin 

TAB (OJJIRENT_OUTFUT ,  KIND,  COUNT); 
end  TAB; 


5.3.7.8.  Sounding  a  terminal  bell 

procedure  bell  (terminal  .  in  file_type)  ; 

Purpose: 

This  procedure  sounds  the  bell  (beeper)  on  the  terminal  represented  by  the  output  terminal  nie 
Identified  by  TERMINAL. 

Parameters: 

TERMINAL  is  an  open  file  handle  on  an  output  terminal  file. 


Exceptions: 

USE_ ERROR  Is  raised  If  TERMINAL  is  not  the  value  of  the  predefined  attribute  FILE_KIND 
or  PACE  is  not  a  value  of  the  predefined  attribute  TERMINAL_KIND  of  the  file 
node  as.-ociated  with  the  file  identified  by  the  parameter  TERMINAL. 

MOI)E_  ERROR 

Is  raised  If  the  rile  Identified  by  TERMINAL  Is  of  mode  IN_FILE. 

STATUS _ ERROR 

la  raised  if  TERMINAL  is  not  an  open  file  handle. 

DEVICE^  ERROR 

la  raised  If  an  Input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 


Additional  Interface: 

procedure  bell 

la 

begin 

BELL(CURRENTOUTPUT) ; 
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KIND  Is  the  kind  (horizontal  or  vertical)  of  lab  stop  to  be  removed. 


Exceptions: 

USE_ERROR  Is  raised  If  TERMINAL  Is  not  the  value  of  the  predefined  attribute  F1LK_K!ND 

or  PAGE  Is  not  a  value  of  the  predefined  attribute  TERMINAL _ KIND  of  the  file 

node  associated  with  the  file  Identified  by  the  parameter  TERMINAL,  or  If  there  Is 
no  tab  stops  of  the  designated  kind  at  the  active  position. 

MODE_ERROR 

Is  raised  If  the  file  Identified  by  TERMINAL  Is  of  mode  IN_FILE. 

STATU  S  _  ERR  OR 

Is  raised  If  TERMINAL  is  not  an  open  file  handle. 

DEV1CE_  ERROR 

Is  raised  If  an  input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 


Additional  Interface: 

procedure  clear_tab(kind  :  in  tabenumeration  :=  horizontal) 

ia 

begin 

CLEARJTAB  (CUKKEKT JJUTTVT ,  KIND)  : 
end  CLEAR  TAB; 


6.3.7. 7.  Advancing  to  the  next  tab  position 

procedure  tab  (terminal  ;  in  FlLEjnfPE; 

KIND  :  in  TAB_ ENUMERATION  :=  HORIZONTAL; 

COUNT  ;  in  POSITIVE  :=  1); 

Purpose: 

This  procedure  advances  the  active  position  COUNT  tab  slops.  Horizontal  advancement  causes 
a  change  in  only  the  column  number  of  the  active  position.  Vertical  advancement  causes  a 
change  in  only  the  row  number  of  the  active  position. 

Parameters: 

TERMINAL  Is  an  open  file  handle  on  an  output  terminal  file. 

KIND  Is  the  kind  (horizontal  or  vertical)  of  tab  stop  to  be  advanced. 

COUNT  is  a  positive  Integer  Indicating  the  number  of  lab  stops  the  active  position  Is  to 

advance. 

Exceptions: 

USE_ ERROR  Is  raised  If  TERMINAL  Is  not  the  value  of  the  predefined  attribute  FILE_KIND 
or  PAGE  Is  not  a  value  or  the  predefined  attribute  TKRMINAL_K!ND  of  the  file 
node  assoelaied  with  the  file  identified  by  the  parameter  TERMINAL,  or  there  arc 
fewer  than  COUNT  tab  stops  of  the  designated  kind  after  the  active  position. 
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Additional  Interface: 

procedure  insert  space  (count:  in  positive  :=  1) 

is 

begin 

INSERTSPACE (CURRENTOUTPUT .  COUNT) ; 
end  INSERT  SPACE ; 


5.3.7.24.  Inserting  blank  lines  in  the  output  terminal  file 

procedure  insert_line  (terminal  :  in  file  type; 

COUNT:  In  POSITIVE  :  =  1); 


Purpose: 

This  procedure  inserts  COUNT  blank  lines  into  the  output  terminal  file  at  the  active  line.  The 
lines  at  and  below  the  active  position  are  shifted  down.  The  COUNT  bottom  lines  of  the  display 
are  lost.  The  active  line  is  not  changed.  The  column  of  the  active  position  Is  changed  to  one. 

Parameters: 

TERMINAL  Is  an  open  file  handle  on  an  output  terminal  file. 

COUNT  Is  the  number  of  blank  lines  to  be  Inserted. 

Exceptions: 

USE_ERROR  Is  raised  If  TERMINAL  Is  not  the  value  or  the  predefined  attribute  FILE_K1ND 
or  PAGE  is  not  a  value  of  the  predefined  attribute  TERMINAL  KIND  of  the  file 
node  associated  with  the  file  Identified  by  the  parameter  TERMINAL,  or  the  value 
of  COUNT  Is  greater  than  the  number  of  rows  Including  and  following  the  active 
position. 

MODE  ERROR 

la  raised  If  the  file  identified  by  TERMINAL  Is  of  mode  IN  _  FILE. 

STATUS  _  ERROR 

Is  raised  If  TERMINAL  Is  not  an  open  file  handle. 

DEVICE_  ERROR 

Is  raised  If  an  Input  or  output  operation  cannot  be  completed  because  u<  a 
malfunction  of  the  underlying  system. 


Additional  Interface: 

procedure  insert  line  (count:  in  positive^  i) 

is 

begin 

INSERT  LINE (CURRENT  OUTPUT.  COUNT); 
end  INSERT  LINE; 
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5.3.7.25.  Determining  graphic  rendition  support 

function  GRAPHICJtENDITION  SUPPORT (TERN I HAL :  in  FILE  TYPE; 

RENDITION  in  GRAPHIC  RENDITION  ARRAY} 


return  boolean; 


Purpose: 

This  function  returns  TRUE  If  the  RENDITION  of  combined  graphic  renditions  Is  supported  by 
the  physical  terminal  associated  with  the  output  terminal  file  Identified  by  TERMINAL; 
otherwise  it  returns  FALSE. 

Parameters: 

TERMINAL  is  an  open  file  handle  on  an  output  terminal  file. 

RENDITION  is  a  combination  of  graphic  renditions. 

Exceptions: 

USE_ ERROR  Is  raised  If  TERMINAL  Is  not  the  value  of  the  predefined  attribute  FILE_K1ND 
or  PAGE  Is  not  a  value  of  the  predefined  attribute  TERMINAL_KIND  of  the  file 
node  associated  with  the  file  Identified  by  the  parameter  TERMINAL,  or  if  the 
selected  graphic  renditions  are  not  supported  by  the  physical  terminal  associated 
with  the  output  terminal  file  identified  by  TERMINAL. 

MODE_ ERROR 

Is  raised  if  the  file  identified  by  TERMINAL  Is  of  mode  IN_FILE. 

STATUS _ ERROR 

is  raised  If  TERMINAL  Is  not  an  open  file  handle. 

DEV1CE_  ERROR 

Is  raised  If  an  input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 


Additional  Interface: 

function  GRAPHIC_RENDITION_SUPPORT (RENDITION: 

in  GRAPHICJtENDITIONARRAY) 

return  boolean 

is 

begin 

return  GRAraic_RENDmoN_sin»paRT (current jxmvr,  rendition); 
end  graphic  rendition  support; 


6.3.7.20.  Selecting  the  graphic  rendition 

procedure  select_graphic_rendition  (ternihal :  in  file_type; 

rendition,  in  graphicrenditionarray 

:=  DEFAULT  GRAPHIC  RENDITION); 


Purpose: 

This  procedure  sets  the  graphic  rendition  for  subsequent  characters  to  be  output  to  the  output 
terminal  file. 
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Parameters: 

TERMINAL  Is  an  open  file  handle  on  an  output  terminal  file. 

RENDITION  Is  the  graphic  rendition  to  be  used  In  subsequent  output  operations. 

Exceptions: 

USE_ ERROR  la  raised  If  TERMINAL  Is  not  the  value  of  the  predefined  attribute  FILE_KIND 
or  PAGE  Is  not  a  value  of  the  predefined  attribute  TERMINAL_KIND  of  the  file 
node  associated  with  the  file  identified  by  the  paramet<  r  TERMINAL,  or  If  the 
selected  graphic  renditions  are  not  supported  by  the  ph  steal  terminal  associated 
with  the  output  terminal  file  Identified  by  TERMINAL. 

MODE_ ERROR 

is  raised  If  the  file  Identified  by  TERMINAL  Is  of  mode  IT.  _FILE. 

STATUS_ ERROR 

Is  raised  If  TERMINAL  Is  not  an  open  file  handle. 

DEV1CE_  ERROR 

is  raised  If  an  Input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 


Additional  Interface: 

procedure  SELECTGRAPHIC  RENDITION  (RENDITION  .  in 

GRAFHI C  RERDITIOH  ARRAY  :  = 
DEFAULT  GRAPHICRENDITION) 

it 

begin 

SELECTGRAPHICREKD ITION  (CURRENTJJUTPUT .  RENDITION)  ; 

end  select  ckathic  rendition; 


5.3.8.  Package  FORM  TERMINAL 

This  package  provides  the  functionality  or  a  form  terminal  (e.g.,  an  IBM  327x  terminal).  A  form 
terminal  consists  of  a  single  device  (Inasmuch  as  a  programmer  Is  concerned). 

The  scenario  for  usage  of  a  form  terminal  has  two  active  agents:  a  process  and  a  user.  Each 
Interaction  with  the  form  terminal  consists  of  a  three  step  sequence.  First,  the  process  creates  and 
writes  a  form  to  the  terminal.  Second,  the  user  modifies  the  form.  Third,  the  process  reads  the 
modified  form. 

A  form  Is  a  two-dimensional  matrix  of  character  positions.  The  rows  of  a  form  are  Indexed  by 
positive  numbers  starting  with  row  one  at  the  top  of  the  display.  The  columns  of  a  Torm  arc  Indexed 
by  positive  numbers  starling  with  column  one  at  the  left  side  of  the  form.  The  position  Identified  by 
row  one,  column  one,  Is  called  the  start  position  of  the  form.  The  position  with  the  highest  row  and 
column  Index  term  Is  called  the  end  position  of  the  form. 

The  position  at  which  an  operation  Is  to  be  performed  Is  called  the  active  position.  The  active 
position  Is  said  to  advance  toward  the  end  position  of  the  form  when  the  Indices  of  Its  position  are 
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Incremented.  The  column  Index  Is  Incremented  until  It  attains  the  highest  value  permitted  Tor  the 
form.  The  next  position  Is  determined  by  Incrementing  the  row  index  of  the  active  position  and 
resetting  the  column  index  to  1. 

A  form  is  divided  Into  qualified  areas.  A  qualified  area  identifies  a  contiguous  group  of  positions  that 
share  a  common  set  of  characteristics.  A  qualified  area  begins  at  the  position  designated  by  an  area 
qualifier  and  ends  at  the  position  preceding  the  next  area  qualifier  toward  the  end  of  the  form. 
Depending  on  the  form,  the  position  of  the  area  qualifier  may  or  may  not  be  considered  to  be  in  a 
qualified  area.  The  characteristics  of  a  qualified  area  consist  of  such  things  as  protection  (from 
modification  by  the  user),  display  renditions  (e.g..  Intensity),  and  permissible  values  (e.g..  numeric 
only,  alphabetic  only).  Each  position  in  a  qualified  area  contains  a  single  printable  ASCII  character. 

5.3.8. 1.  Types  and  subtypes 

type  AREA  INTENSITY  la 
(HONE." 

NORMAL. 

HIGH) ; 

type  AREA  PROTECTION  ia 
(UNPROTECTED. 

PROTECTED)  ; 

type  area  input  ia 

(GRAPHICCHARACTERS . 

NUMERICS. 

ALPHABETICS) ; 

type  AREAVALUE  is 
(MO_FILL. 

FILLWITH  ZEROES. 

FILL'*ITH-SPACES) ; 

type  FORK  TYPE 
(ROW 
COLUMN 

AREA_gUALIFIER_REUUIRES_SPACE 

is  private: 

subtype  FILE_TTPE  is  CAIS .  IO_DEFINITIONS .  FILE_TTPE; 
subtype  PR i ntablecharacters  is  character  range  •  • 

AREA_ INTENSITY  indicates  the  Intensity  at  which  the  characters  in  the  area  should  be  displayed 
(NONE  Indicates  that  characters  are  not  displayed).  AREA _  PROTECTION  specifies  whether  the 
user  can  modify  the  contents  of  the  area  when  the  form  has  been  activated.  AREA_INPl’T  specifies 
the  valid  characters  that  may  be  entered  by  the  user;  GRAPHIC _ CHARACTERS  Indicates  that  any 
printable  character  may  be  entered.  AREA_VALUE  indicates  the  initial  value  that  the  area  should 
have  when  activated;  NO  _ FILL  indicates  that  the  value  has  been  specified  by  a  previous  PUT 
statement.  FORM_TYPE  describes  characteristics  of  forms.  FILE_TYPE  describes  the  type  for 
file  handles.  PRINTABLE_ CHARACTERS  describes  the  characters  that  can  be  output  to  a  form 
terminal. 


:  POSITIVE; 
:  POSITIVE; 
.  BOOLEAN) 
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5. 3. 8. 2.  Determining  the  number  of  function  keys 

function  MA«NUN_FUNCTiONjcEYCrERMiNAL:  in  filetype) 
return  natural; 

Purpose: 

This  function  returns  the  maximum  function  key  Identifier  that  can  !>e  returned  by  the  function 
TERMINATION _  KEY  (see  Section  5.3.8.13). 

Parameters: 

TERMINAL  is  an  open  file  handle  on  a  terminal  file. 


Exceptions: 

USE_ERROR  Is  raised  If  TERMINAL  Is  not  the  value  of  the  predefined  attribute  FILE_KIND 
or  FORM  Is  not  a  value  of  the  predefined  attribute  TERMINAL_K1ND  of  the  Tile 
node  associated  with  the  file  Identified  by  the  parameter  TERMINAL. 

MODE_ ERROR 

is  raised  If  the  file  Identified  by  TERMINAL  Is  of  mode  OUT _  FILE  or 
APPEND  _  FILE. 

STATUS_ ERROR 

is  raised  if  TERMINAL  is  not  an  open  file  handle. 

DEVICE  _  ERROR 

is  raised  If  an  Input  or  output  operation  cannot  be  completed  because  or  a 
malfunction  of  the  underlying  system. 


Additional  Interface: 

function  maxinumfunctionjcet  return  natural 

is 

begin 

return  MAXINUM_FUNCTION_KEY(CURRENT_INPUr)  ; 
end  MAXIMUM  FUNCTION  KEY; 


5.3. 8. 3.  Defining  a  qualified  area 

procedure  define_qualifiq>_area 


(FORM: 

in 

out  FORMJTYPE; 

INTENSITY: 

in 

AREA_"lNTENSITY  :«  NORMAL; 

PROTECTION: 

in 

AREA~ PROTECT I ON  :=  PROTECTED; 

INPUT: 

in 

AREA~IMPUT  :«  GRAPHIC_CHARACTERS; 

VALUE: 

in 

AREAVALUE  :«  NO  FILL); 

Purpose 

This  procedure  places  an  area  qualifier  with  the  designated  attributes  at  the  active  position  of 
the  form.  A  qualified  area  consists  of  the  character  positions  between  two  area  qualifiers.  The 
area  Is  qualified  by  the  area  qualifier  that  precedes  the  area.  A  qualified  area  may  or  may  not 
Include  the  position  of  Its  area  qualifier. 
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Parameters: 

FORM  is  the  form  on  which  the  qualified  area  la  being  defined. 

INTENSITY  Indicates  the  Intensity  at  which  the  qualified  area  Is  to  be  displayed. 
PROTECTION  Indicates  the  protection  for  the  qualified  area. 

INPUT  indicates  the  permissible  Input  characters  for  the  qualified  area. 

VALUE  Indicates  the  Initial  value  of  the  qualified  area. 

Exceptions: 

STATU  S  __  ERROR 

is  raised  if  the  active  position  is  already  defined  as  an  area  qualifier. 

5.3.8.4.  Removing  an  area,  qualifier 

procedure  REMOVE JUtEAJftULIFIER (FORM:  in  out  FORMTYPE)  ; 

Purpose: 

This  procedure  removes  an  area  qualifier  from  the  active  position  of  the  form. 
Parameters: 

FORM  is  the  form  from  which  the  qualified  area  Is  to  be  removed. 

Exceptions. 

USE_ERROR  la  raised  If  the  active  position  does  not  have  an  area  qualifier. 

STATUS _ERROR 

Is  raised  If  the  active  position  does  not  contain  an  area  qualifier. 

6.3. 8. 5.  Changing  the  active  position 

procedure  set_positiox  (form  :  in  out  fqrm_ttpe; 

position :  In  POSrflOR  TfPE)  ; 

Purpose: 

This  procedure  Indicates  the  position  on  the  form  that  Is  to  become  the  active  position. 

Parameters: 

FORM  Is  the  form  on  which  to  change  the  active  position. 

POSITION  Is  the  new  active  position  on  the  form. 

Exceptions: 

LAYOUT  _  ERROR 

Is  raised  If  POSITION  does  not  Identify  a  position  In  FORM. 
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5. 3. 8. 8.  Moving  to  the  next  qualified  area 

procedure  ND(T_9ua.iFiED  area (form:  in  out  fcrm  type; 

COUNT:  in  POSITIVE  :=  1); 

Purpose: 

This  procedure  advances  the  active  position  COUNT  qualified  areas  toward  the  end  of  the  form. 
Parameters: 

FORM  is  the  form  on  which  the  active  position  is  being  advanced. 

COUNT  Is  the  number  of  qualified  areas  the  active  position  is  to  be  advanced. 

Exceptions: 

USE_ERROR  is  raised  If  FORM  has  fewer  than  COUNT  qualified  areas  after  the  active  position. 

5. 3.8.7.  Writing  to  a  form 

procedure  put(form:  in  out  forn  ttpe; 

item  in  printablf_character) ; 


Purpose: 

This  procedure  places  ITEM  at  the  active  position  of  FORM  and  advances  the  active  position 
one  position  toward  the  end  position.  If  the  active  position  is  the  end  position,  the  active 
position  Is  not  changed. 

Parameters: 

FORM  is  the  form  being  written. 

ITEM  is  the  character  to  be  written  to  the  form. 

Exceptions: 

USE_ERROR  la  raised  If  the  active  position  contains  an  area  qualifier  and 
AREA  _  QUALIFIER  _  REQUIRES  _  SPACE  of  FORM  was  set  to  TRUE. 


Additional  Interface: 

procedure  put  (FORM:  in  out  F0rm_ttpe; 

ITEM:  in  STRING) 

k 

begin 

for  index  in  item-first  ..  item-last  loop 

PUT  (FORM,  ITEM (INDEX)); 

end  loop; 
end  PVT; 


109 


PROPOSED  MIl^STD-CAIS 
31  JAM  ARY  I9&5 

5.3. 8. 8.  Eraaing  a  qualified  area 

procedure  erase  area  (form  .  in  out  FtnujrrPE) ; 


Purpose: 

This  procedure  places  space  characters  In  all  positions  of  the  area  In  which  the  active  position  of 
the  form  is  located. 

Parameters: 

FORM  Is  the  form  on  which  the  qualified  area  Is  being  erased. 

Exceptions: 

STATUS _ ERROR 

Is  raised  If  no  area  qualifiers  have  been  defined  for  FORM. 

5.3.8. 0.  Eraaing  a  form 

procedure  ERASE_FORN  (FORK :  in  out  FQRM_TYPE) ; 

Purpose: 

This  procedure  removes  all  area  qualifiers  and  places  SPACE  charrcters  In  all  positions  of  the 
form. 

Parameters: 

FORM  Is  the  form  to  be  erased. 


Exceptions: 

None. 


5.3.8.10.  Activating  a  form  on  a  terminal 

procedure  activate  (terminal:  in  filetype; 

FORM :  in  out  FORM  TYPE)  : 


Purpose: 

This  procedure  activates  the  form  on  the  terminal.  The  contents  of  the  terminal  file  Is  modified 
to  reflect  the  contents  of  the  form.  When  the  user  of  the  terminal  enters  a  termination  key.  the 
modified  contents  of  the  terminal  file  Is  copied  back  to  the  form  and  returned.  This  operation 
may  not  resu't  in  the  modification  of  protected  areas. 

Parameters: 

TERMINAL  Is  an  open  file  handle  on  a  terminal  file. 

FORM  Is  the  form  to  be  activated. 

Exceptions: 

USE_  ERROR  Is  raised  If  TERMINAL  Is  not  the  value  of  the  predefined  attribute  FII.F._KIND 
or  FORM  Is  not  a  value  of  the  predefined  attribute  TERMINAL_KIND  of  the  file 
node  associated  with  the  file  Identified  by  the  parameter  TERMINAL. 
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STATUS_ ERROR 

Is  raised  If  TERMINAL  Is  not  an  open  file  handle. 


5.3.8.11.  Reading  from  a  form 

procedure  set  (form:  in  out  form_ttfe; 

ITEM:  OUt  PRIMTABLE_CHAIUCTER)  ; 

Purpose: 

This  procedure  reads  a  character  from  FORM  at  the  active  position  and  advances  the  active 
position  forward  one  position  (unless  the  active  position  Is  the  end  position).  An  area  qualifier 
(on  a  form  on  which  the  area  qualifier  requires  space)  Is  read  as  the  SPACE  character 


Parameters: 

FORM 

Is  the  form  to  be  read. 

ITEM 

Is  the  character  that  was  read. 

Exceptions: 

None. 

Additional  Interface: 

procedure  err  (form  In  out  form  TYPE: 

ITEM  OUt  STRING} 

is 

begin 

for  INDEX  in  HEM -FIRST  .  .  ITEM -LAST  loop 
GET (FORM.  ITEM (INDEX)) ; 
end  loop: 
end  GET: 


5.3.8.12.  Determining  changes  to  m  form 

function  isformjjpdated  (form  :  In  form_type) 
retur  n~BOOLEAM ; 


Purpose: 

This  function  returns  TRUE  If  the  value  of  any  position  on  the  form  was  modified  during  the 
last  activate  operation  In  which  the  form  was  used;  otherwise  It  returns  FALSE. 

Parameters: 

FORM  Is  the  form  to  be  queried. 

Exceptions: 

None. 
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5.3.8.13.  Determining  the  termination  key 

function  termination_key  (fork  in  form_type) 
return  natural; 


Purpose: 

This  function  returns  a  number  that  Indicates  which  (Implementation-dependent)  key 
terminated  the  ACTIVATE  procedure  for  the  FORM.  A  value  of  zero  Indicates  the  normal 
termination  key  (e.g.,  the  ENTER  key). 

Parameters: 

FORM  Is  the  form  to  be  queried. 


Exceptions: 

None. 


6.3.8.14.  Determining  the  aite  of  a  form 

function  formsizecform:  in  forn  ttpe) 
return  POSITION  TYPE; 


Purpose; 

This  function  returns  the  position  of  the  last  column  of  the  last  row  of  the  form. 


Parameters 

FORM  Is  the  form  to  be  queried. 


Exceptions: 

None 


5.3.8.15.  Determining  the  aize  of  a  terminal 

function  terminal_size (terminal:  in  filejtpe) 
return  POSITION  TYPE; 


Purpose: 

This  function  returns  the  position  of  the  last  column  of  the  last  row  of  the  terminal  file. 
Parameters: 

TERMINAL  Is  an  open  file  handle  on  a  terminal  file. 


Exceptions: 

USE_ERROR  Is  raised  If  TERMINAL  is  not  the  value  of  the  predefined  attribute  FILE_KINI> 
or  FORM  Is  not  a  value  of  the  predefined  attribute  TERMINAL_KIND  of  ihc  Die 
node  assoelatcd  with  the  file  Identified  by  the  parameter  TERMINAL. 

STATUS _ ERROR 

Is  raised  If  TERMINAL  Is  not  an  open  file  handle. 
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DEV1CE_  ERROR 

Is  raised  If  an  input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 


Additional  Interface: 

function  TIRminalsize 

mturn  position  type 

to 

begin 

return  TERMINAL_SIZE  (CURRENT_OUTPUT)  ; 
end  TERMINAL  SIZE: 


5.3.8.10.  Determining  if  the  area  qualifier  requires  apace  in  the  form 

function  areajjualifierreouires  space  (form  :  in  form  type) 
return  boolean: 


Purpose: 

This  function  returns  TRUE  If  the  area  qualifier  requires  space  in  the  form;  otherwise  it  returns 
FALSE 

Parameters: 

FORM  Is  the  form  to  be  queried. 


Exceptions: 

None. 


5.3.8.17.  Determining  if  the  area  qualifier  requirea  apace  on  a  terminal 

function  AREA_qUALIFIER_RE8UIRES_SPACE {TERMINAL:  in  FILE  TYPE) 
return  boolean. 


Purpose: 

This  function  returns  TRUE  If  the  area  qualifier  requires  space  on  the  physical  terminal 
associated  with  the  terminal  file  Identified  by  TERMINAL;  otherwise  It  returns  FALSE. 

Parameters: 

TERMINAL  Is  m  open  file  handle  on  a  terminal  file. 


Exceptions: 

USE_ERROR  Is  raised  if  TERMINAL  Is  not  the  value  of  the  predefined  attribute  FILE_K1ND 
or  FORM  Is  not  a  value  of  the  predefined  attribute  TERMINAL_KIND  of  the  flic 
node  associated  with  the  file  Identified  by  the  parameter  TERMINAL. 

STATUS _ ERROR 

Is  raised  If  TERMINAL  Is  not  an  open  file  handle. 

DEVICE  ERROR 
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is  raised  if  an  Input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 


Additional  Interface: 

Function  area_qualifier_requires_space 
return  boolean 

ta 

begin 

return  AR£A_tJUALIFlER_REflUIRES_SPACE  (CURRENTJxmvn  ; 

end  area_qualifier_requir£s_o>ace;~ 


5.3.9.  Package  MAGNETIC _ TAPE 

This  package  provides  Interfaces  for  the  support  of  Input  and  output  operations  on  both  labeled  and 
unlabeled  magnetic  tapes.  Interfaces  for  labeled  tapes  are  designed  with  car<Tul  consideration  of  level 
II  of  the  [ANSI  78]  standard.  These  interfaces  only  support  single-volume  magnetic  tape  files. 

To  use  a  tape  drive,  a  file  handle  on  the  file  representing  the  tape  drive  must  be  obtained  (see  OPEN 
In  Section  5. 3. A3).  The  first  time  a  tape  is  used.  It  must  be  Initialized  either  as  a  labeled  tape  or  as  an 
unlabeled  tape.  All  initialized  tapes  may  be  loaded  as  unlabeled  tapes:  however,  only  Initialized  labeled 
tapes  may  be  loaded  as  labeled  teoes.  Once  a  tape  has  been  loaded.  CAIS  TEXT  _IO  routines  are 
used  to  get  Information  to  and  from  the  tape. 

When  Information  transfer  Is  completed,  the  tape  is  unloaded  and  dismounted  using  the  UNLOAD 
and  DISMOUNT  procedures. 

Once  a  tape  Is  dismounted,  another  tape  may  be  mounted.  When  the  user  Is  rinlshed  utilizing  the 
drive,  he  closes  the  file  handle  on  the  file  representing  the  tape  on  the  drive  (see  Section  5.3.4). 

Magnetic  tape  drive  files  can  only  be  created  by  the  implementation  Implementation-denned  nie 
characteristics  must  be  supported  by  the  Implementation  and  will  Include  the  densities  and  block  sizes 
supported  by  the  tape  drive,  whether  or  not  a  tape  Is  mounted  on  the  drive  and  whether  the  tape  was 
loaded  as  a  labeled  or  unlabeled  tape.  Each  block  of  a  file  may  be  terminated  by  zero  or  more  nil 
characters. 

An  unlabeled  tape  Is  read  according  to  the  format: 


BOT  Hie  *  nie  *  ...  •  file  •* 


where  *  represents  a  tape  mark.  ••  represents  the  logical  end  of  tape,  and  BOT  Is  the  beginning  of 
the  tape.  For  the  CAIS,  a  Hie  on  a  magnetic  tape  Is  either  a  text  nie  or  a  label  group.  A  labeled  tape 
may  be  mounted  as  an  unlabeled  tape,  which  causes  each  label  group  to  be  considered  as  a  nie.  A 
label  group  can  be  one  of  the  following:  a  volume  header  label  and  a  nie  header  label,  or  a  Hie  header 
label,  or  an  end-of-nie  label. 

A  labeled  tape  Is  read  according  to  the  format: 
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BOT  VOLl  HDR  *  nie  ♦  EOF  »  HDR  *  file  •  EOF  *...*  HDR  *  Ole  *  EOF** 


where  *  represents  a  tape  mark,  **  represents  the  logical  end  of  tape,  BOT  Is  the  beginning  of  the 
tape,  VOLl  Is  the  volume  header  label,  HDR  Is  the  file  header  label,  and  EOF  Is  the  end-of-file  label. 


S.3.9.1.  Types  and  subtypes 

type  TAPE_POSinaK  is 

(BEGINNING  OFTAPE , 
PHYSICAL  imfOF  TAPE. 
TAPE  MARK, 

OTHER)  ; 


subtype  REEL  JUNE  is  STRING; 

subtype  vdlumestring  is  stringu  . ; 

subtype  file  string  is  string  (l . .  it)  ; 

subtype  LABEL  SORING  Is  STRING  (1..80); 

subtype  FILETYPE  is  CAIS.IQ  DEFIHmONS. FILE  TYPE; 

TAPE_POSITION  describes  the  position  of  the  tape  on  the  tape  drlvi :  a  value  or  TAPE_MARK 
means  that  the  tape  Is  positioned  Just  after  a  tape  mark.  That  is,  a  read  in  this  position  will  read  the 
next  file  or  label.  A  read  starting  In  position  TAPE_MARK  will  only  read  a  tape  mark  If  there  are 
two  consecutive  tape  marks  on  the  tape  at  this  location. 

REEL_NAME  describes  the  type  used  for  the  external  name  of  a  tape  :i.e,  the  name  written  on  the 
tape  container). 

VOLUME_STRING  and  FILE_STR1NG  both  have  the  synl;x  of  an  Ada  Identifier. 
LABEL _ STRING  describes  the  type  used  for  reading  volume  header  labels,  file  header  labels  and 
end-of-flle  labels.  FILE_TYPE  describes  the  type  for  file  handles,  which  are  used  for  controlling  all 
operations  on  tape  drives. 

5.3.O.2.  Mounting  »  tape 

procedure  nount (tape  drive,  in  file  type. 

TAPE  JUNE  in  REEL_NA"E, 

DENSITY:  in  POSIT'*  I)  ; 


Purpose: 

This  procedure  generates  an  Implementatlon-d  'fined  request  that  the  tape  whose  external  name 
Is  TAPE_NAME  be  mounted  on  the  tape  drive  represented  by  the  file  Identified  by 
TAPE_DRIVE.  It  also  requests  that  the  tape  drive  density  be  get  to  DENSITY.  Following 
completion  of  the  requested  operations,  the  function  IS_MOUNTED(TAPE_DRIVE)  will 
return  TRUE. 

Parameters: 

TAPE_  DRIVE 

Is  an  open  flic  handle  on  the  flic  representing  the  tape  drive. 

TAPE  _  NAME 

Is  an  external  name  which  Identifies  the  tape  to  be  mot  nted  on  the  (ape  drive. 
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DENSITY  is  ihe  density  in  characters  per  Inch  (e.g.,  800,  1600,  6250). 


Exceptions: 

USE  __  ERROR  Is  raised  If  MAG NET1C _ TAPE  is  not  the  value  of  the  attribute  FILE _ KIND  of 
the  node  associated  with  the  file  Identified  by  TAI*E_PRrVE  or  If 
IS_MOUNTED(TAJPE_ DRIVE)  Is  TRUE  at  the  time  of  the  call. 

STATUS _ ERROR 

is  raised  If  TAPE _ DRIVE  is  not  an  open  file  handle. 

DEVICE  ERROR 

Is  raised  If  this  operation  cannot  be  completed  because  of  a  malfunction  of  the 
underlying  system. 


5.3.O.3.  Loading  an  unlabeled  tape 


procedure  LQAD_UlfLAB£L£D  (TAPEDRIVE : 

DENSITY : 


BLOCX  SIZE: 


in  FILEJTYPE; 

in  positive; 

in  POSITIVE); 


Purpose: 

This  procedure  loads  the  tape  on  the  tape  drive  represented  by  the  file  Identified  by 
TAPE_DRIVE.  The  tape  Is  positioned  at  the  beginning  of  tape.  The  DENSITY  is  validated 
against  the  settings  of  the  tape  drive.  The  block  size  for  subsequent  reads  and  writes  is  set  to 
the  value  of  BLOCK_SIZE.  Following  completion  of  this  procedure,  the  function 
IS _LOADED(TAPE_ DRIVE)  will  return  true. 

Parameters. 

TAPE_DRIVE  Is  an  open  file  handle  on  the  file  representing  the  drive. 

DENSITY  Is  the  density  In  characters  per  inch  (e.g.,  800,  1600.  8250)  at  which  the  tape  is  to 

be  read  or  written. 

BLOCK _ SIZE  Is  the  size  of  each  data  block  which  Is  to  be  read  from  or  written  to  the  file 
Identified  by  TAPE _ DRIVE. 


Exceptions: 

USE _ ERROR  Is  raised  If  IS_LOADED(TAPE_  DRIVE)  Is  TRUE  or 
IS _MOUNTED(TAPE_ DRIVE)  Is  FALSE  at  the  time  of  the  c  I,  or  ir  DENSITY 
la  not  the  same  as  the  density  of  the  tape  drive,  or  If  the  block  size  cannot  be 
supported  by  the  tape  drive. 

STATUS  ERROR 

Is  raised  If  TAPE _  DRIVE  Is  not  an  open  file  handle. 

DEVICE  _  ERROR 

Is  raised  If  an  Input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system  or  If  the  if  pe  Is  uninitialized. 
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5. 3. 0.4.  Initialling  an  unlabeled  tape 


procedure  initlalize_unlabeled  (tape_drive  : 


DENSITY : 
BLOCK  SIZE: 


in  FILETYPE: 
In  POSITIVE; 
in  POSITIVE); 


Purpose: 


This  procedure  initializes  the  tape  which  Is  mounted  on  the  tape  drive  represented  by  the  file 
Identified  by  TAPE_DRIVE.  The  tape  drive  must  have  been  mounted  but  not  loaded.  If  the 
tape  Is  not  positioned  at  the  beginning  of  tape,  then  the  tape  Is  rewound  to  it.  Two  adjacent 
tape  marks  are  written  following  the  beginning  of  tape  mark. The  DENSITY  Is  validated  against 
the  settings  of  the  tape  drive.  The  block  sign  for  subsequent  reads  and  writes  Is  set  to  the  value 
of  BLOCK_SIZE.  The  tape  is  positioned  at  the  beginning  of  the  tape.  Initialization  places  the 
logical  end  of  tape  at  the  beginning  of  the  tape.  The  resulting  tape  Is  an  Initialized  unlabeled 
tape. 


Parameters: 

TAPE_ DRIVE  Is  an  open  file  handle  on  the  file  representing  the  drive. 

DENSITY  is  the  density  in  characters  per  inch  (e.g.,  800,  1600,  6250) 

BLOCK_SIZEIs  the  size  of  each  data  block  which  is  to  be  read  from  or  written  to  the  file 
Identified  by  TAPE  DRIVE. 


Exceptions: 

USE_ERROR  is  raised  if  MAGNETIC_TAPE  Is  not  the  value  of  the  attribute  FILE_KIND  or 
the  node  associated  with  the  nie  Identified  by  TAPE_DRIVE,  or  DENSITY  is  not 
the  same  as  the  density  of  the  tape  drive,  or  If  the  block  size  cannot  be  supported 
by  the  tape  drive. 

MODE_ ERROR 

Is  raised  If  the  file  Identified  by  TAPE_DR!VE  Is  of  mode  IN_FILE. 

STATUS_ ERROR 

is  raised  If  TAPE_  DRIVE  is  not  an  open  file  handle. 

DEVICE  _  ERROR 

Is  raised  If  an  Input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 


Notes: 

The  first  file  Is  written  immediately  following  the  beginning  of  tape  mark,  overwriting  the  two 
tape  marks  written  at  Initialization. 


5.3.O.5.  Loading  a  labeled  tape 


procedure  loas_labeled(tape_drive: 

VOLUNE_IDr:rfTIFIER : 
DENSITY: 

BLOCK  SIZE: 


In  FILE_TYPE ; 
in  VOLUME_SntINS ; 
in  POSITIVE; 

In  POSITIVE); 
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Purpose: 

This  procedure  loads  the  labeled  tape  on  the  tape  drive  represented  by  the  file  Identified  by 
TAPE_ DRIVE.  It  checks  to  see  that  the  first  block  on  the  volume  is  a  volume  header  label 
("VOLl").  The  VOLUME _ IDENTIFIER  In  the  parameter  list  must  match  the  volume 
Identifier  In  the  volume  header  label  on  the  tape.  The  tape  Is  positioned  at  the  beginning  of 
tape.  The  DENSITY  Is  validated  against  the  settings  of  the  tape  drive.  The  block  size  for 
subsequent  reads  and  writes  Is  set  to  the  value  of  BLOCK_SIZE.  Following  completion  of  this 
procedure,  the  function  IS_LOADED(TAPE_  DRIVE)  (see  Section  S.3.9.6)  will  return  TRUE. 

Parameters: 

TAPE_DRIVE  Is  an  open  file  handle  on  the  file  representing  the  tape  drive. 

VOLUME  _  IDENTIFIER 

Is  the  name  which  Identifies  the  volume. 

DENSITY  Is  the  density  in  characters  per  inch  (e.g..  800,  1600,  6250)  at  which  the  tape  is  to 
be  read  or  written. 

BLOCK_SIZE  Is  the  size  of  each  data  block  which  is  to  be  read  from  or  written  to  the  file 
Identified  by  TAPE  DRIVE. 


Exceptions: 

USE_  ERROR  Is  raised  If  IS  _  LO AD EI>( TAPE _  DRIVE)  Is  TRUE  or 

IS_MOUNTED(TAPE_DRIVE)  Is  FALSE  prior  to  the  call,  or  the 
VOLUME_ IDENTIFIER  does  not  match  the  volume  identifier  in  the  volume 
header  label  on  the  tape,  or  If  the  tape  Is  unlabeled.  USE_ ERROR  is  also  raised  If 
the  block  size  cannot  be  supported  by  the  tape  drive  or,  if  DENSITY  is  not  the 
same  as  the  density  of  the  tape  drive. 

STATUS _ ERROR 

Is  raised  If  TAPE _ DRIVE  Is  not  an  open  file  handle. 

DEVICE  _  ERROR 

is  raised  if  an  Input  or  output  operation  cannot  be  completed  berause  of  a 
malfunction  of  the  underlying  system. 


S.3.9.6.  Initializing  a  labeled  tape 

in  FILETYPE; 
in  VDUMESTRXNG; 
in  POSITIVE; 

in  positive; 

in  CHARACTER:**  *); 


procedure  iritxalize_labeled  (tape_drive  : 

VOLUME_n>ENTCFIEJl : 
DENSITY: 
BL0CX_8IZE : 

ACCESS ISILITT: 


Purpose: 

This  procedure  Initializes  the  tape  which  Is  mounted  on  the  tape  drive  represented  by  the  file 
Identified  by  TAPE _ DRIVE.  The  tape  drive  must  have  been  mounted  but  not  loaded.  If  the 
tape  Is  not  positioned  at  the  beginning  of  tape,  then  the  tape  Is  rewound  to  It.  A  volume  header 
label  Is  written,  followed  by  two  tape  marks.  The  tape  Is  positioned  following  the  volume  h  -ndrr 
label.  Initialization  places  the  logical  end  of  tape  after  the  volume  header  label.  The  DENSITY 
Is  validated  against  the  settings  of  the  tape  drive.  The  block  size  for  subsequent  reads  and 
writes  .let  to  the  value  of  BLOCK  _  SIZE.  The  resulting  tape  Is  an  Initialized  labeled  tape. 
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Parameters: 

TAPE_DRIVE  Is  an  open  file  handle  on  the  file  representing  the  tape  drive. 

VOLUME  _  IDENTIFIER 

is  a  six-character  string  giving  the  volume  name. 

DENSITY  Is  the  density  In  characters  per  Inch  (e.g.,  800,  1600,  6250)  at  which  the  tape  is  to  be 
read  or  written. 

BLOCK_SIZEis  the  size  of  each  data  block  which  Is  to  be  read  from  or  written  to  the  nie 
Identified  by  TAPE_ DRIVE. 

ACCESSIBILITY 

Is  a  character  representing  restrictions  on  access  to  the  tape,  in  accordance  with 
[ANSI  78];  a  SPACE  Indicates  no  access  control. 


Exceptions: 

USE _ ERROR  Is  raised  If  MAG NETIC _ TAPE  Is  not  the  value  or  the  attribute  FILE_KIND  of 
the  node  associated  with  the  file  Identified  by  TAPE  _  DRIVE,  or  the 
VOLUME _ IDENTIFIER  does  not  match  the  volume  Identifier  In  the  volume 
header  label  on  the  tape,  or  if  the  tape  Is  unlabeled. 

MODE _ ERROR 

Is  raised  If  the  file  Identified  by  TAPE_DRIVE  Is  of  mode  IN__FILE. 

STATUS _ ERROR 

la  raised  If  TAPE  _  DRIVE  Is  not  an  open  file  handle. 

DEVICE  _  ERROR 

Is  raised  If  an  Input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 


Notes: 

When  the  first  file  is  written  on  the  tape,  the  file  header  label  will  follow  the  volume  header 
created  by  this  procedure. 

6.3.O.7.  Unloading  a  tape 

procedure  unload (tap*_dmve:  In  file  ttpe) ; 


Purpose: 

This  procedure  unloads  the  tape  on  the  tape  drive  represented  by  the  file  Identified  by 
TAPE_ DRIVE.  It  rewinds  the  tape  to  the  beginning  of  tape  and  releases  the  established  block 
size.  Following  completion  of  this  procedure,  the  function  IS_LOADED(TAPE_  DRIVE)  will 
return  FALSE. 

Parameters: 

TAPE _ DRIVE  Is  an  open  file  handle  on  the  file  representing  the  tape  drive. 
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Exceptions: 

STATUS _ ERROR 

is  raised  If  TAPE __ DRIVE  is  not  an  open  file  handle. 

DEVICE  _  ERROR 

Is  raised  if  an  Input  or  output  operation  cannot  be  completed  b< 'cause  or  a 
malfunction  of  the  underlying  system. 


Notes: 

If  no  conditions  for  these  exceptions  exist  and  there  Is  no  tape  loaded  on  the  tape  drive,  this 
procedure  has  no  effect. 

5.3.O.8.  Dismounting  a  tape 

procedure  DiSKCUirr (tape  .  in  file_type)  : 

Purpose: 

This  procedure  generates  an  Implementation-defined  request  that  the  tape  on  the  tape  drive 
represented  by  the  file  Identified  by  TAPE_ DRIVE  be  removed  from  the  drive.  It  makes  the 
tape  available  for  removal  and  releases  the  established  density.  Following  the  completion  of  this 
procedure,  the  function  IS_MOUNTED  (TAPE_DRIVE)  will  return  FALSE. 

Parameters: 

TAPE _ DRIVE  Is  an  open  file  handle  on  the  file  representing  the  tape  drive. 


Exceptions: 

USE _ ERROR  is  raised  If  MAGNETIC_TAPE  is  not  the  value  or  the  attribute  FILE_KIND  or 
the  node  associated  with  the  file  Identified  by  TAPE_DRIVE. 

STATUS _ ERROR 

Is  raised  If  TAPE_DRIVE  is  not  an  open  file  handle. 

DEVICE_  ERROR 

is  raised  If  this  operation  cannot  be  completed  because  of  a  malfunction  of  the 
underlying  system. 


Notes: 

If  no  conditions  for  these  exceptions  exist  and  there  Is  no  tape  mounted  on  the  tape  dri-r  this 
procedure  has  no  effect. 

6.3.8.O.  Determining  if  the  tape  drive  ia  loaded 

function  is_loaded  (tape  j»iye  :  in  filejtype) 
return  boolean; 


Purpose: 

This  function  returns  TRUE  If  the  tape  on  the  tape  drive  represented  by  the  file  Identified  by 
TAPE_DRIVE  has  been  loaded;  otherwise  It  returns  FALSE.  , 
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TAPE_DRIVE  is  an  open  Ole  handle  on  the  file  representing  the  tape  drive. 


Exceptions: 

USE_ERROR  Is  raised  If  MAGNETIC_TAPE  Is  not  the  value  of  the  attribute  FDLE_KIND  of 
the  node  associated  with  the  file  Identified  by  TAPE_DRrVE. 

STATUS _ ERROR 

is  raised  If  TAPE_DRIVE  is  not  an  open  file  handle. 

DEVICE  _  ERROR 

Is  raised  If  an  Input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 

5.3.9.10.  Determining  if  a  tape  is  mounted 

function  isjoukted  (tapedrive  in  fil£_type) 
return  booleamT 


Purpose: 

This  function  returns  TRUE  If  a  tape  Is  mounted  on  the  tape  drive  represented  by  the  file 
identified  by  TAPE_ DRIVE;  otherwise  It  returns  FALSE. 

Parameters: 

TAPE_ DRIVE  Is  an  open  file  handle  on  the  file  representing  the  tape  drive. 

Exceptions: 

USE_ERROR  is  raised  H  MAGNETIC_TAPE  is  not  the  value  of  the  attribute  FILE_KIND  of 
the  node  associated  with  the  file  Identified  by  TAPE_DRfVE. 

STATUS _ ERROR 

is  raised  If  TAPE_DRrVE  Is  not  an  open  file  handle. 

DEVICE_  ERROR 

Is  raised  If  an  Input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  or  the  underlying  system. 

5.3.9.11.  Determining  the  position  of  the  tape 

function  tape_status  (tapedmve  In  file_type) 
return  tape  position; 


Purpose: 

This  function  returns  current  tape  position  information. 

Parameters: 

TAPE_DRIVE  Is  an  open  file  handle  on  the  file  representing  the  tape  drive. 
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Exceptions: 

USE _ ERROR  is  raised  If  MAGNETIC _ TAPE  Is  not  the  value  of  the  attribute  FILE _K INI)  or 
the  node  .issociated  with  the  file  Identified  by  TAPE_DRrVE. 

STATUS _ ERROR 

Is  raised  if  TAPE  _  DRIVE  Is  not  an  open  file  handle. 

DEVICE  _ERROR 

is  raised  If  an  Input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 

5.3.0.12.  Rewinding  the  tape 

procedure  revimd  tape  (tapedrive  ;  in  file_type)  ; 


Purpose: 

This  procedure  positions  the  tape  at  the  beginning  of  tape. 

Parameters: 

TAPE _  DRIVE  is  an  open  file  handle  on  the  file  representing  the  tape  drive. 


Exceptions: 

USE _ ERROR  Is  raised  ir  MAGNET1C_TAPE  is  not  the  value  or  the  attribute  FILE  KINI)  or 
the  node  associated  with  the  file  Identified  by  TAPE_ DRIVE. 

STATUS _ ERROR 

is  raised  If  TAPE _ DRIVE  Is  not  an  open  file  handle. 

DEVICE  _  ERROR 

la  raised  If  an  Input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 

5.3.0.13.  Skipping  tape  marks 

procedure  SKIPtaferarks  ctapedrive  in  filetype; 

NUMBER :  in  INTEGER  .  =1 ; 

TAPE  STATE :  out  TAFE  POSITION)  ; 


Purpose: 

This  procedure  provides  a  method  of  skipping  over  tape  marks.  A  positive  NUMBER  Indicates 
forward  skipping,  while  a  negative  NUMBER  Indicates  backward  skipping.  If  NUMBER  Is  zero, 
the  tape  position  does  not  change. 

Following  a  call  to  SKIP_TAPK_ MARKS,  if  NUMBER  Is  positive,  the  tape  Is  positioned 
Immediately  following  the  appropriate  tape  mark.  Following  a  call  to  SKIP_TAPE_MARKS, 
If  NUMBER  Is  negative,  the  tape  is  positioned  immediately  preceding  the  appropriate  tape  mark 
(l.e.,  at  the  end  of  a  file  or  label).  If  two  consecutive  tape  marks  are  encountered,  the  tape  Is 
positioned  Immediately  following  the  second  one,  even  If  fewer  than  NUMBER  tape  marks  have 
been  skipped.  Additionally,  the  current  column,  current  line  and  current  page  numbers  (see 
(LRMj  H.3)  are  set  to  one. 
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Parameters: 

TAPE_DRIVE  Is  an  open  file  handle  on  the  file  representing  the  tape  drive. 

NUMBER  Is  the  number  of  tar  marks  to  skip  and  the  direction  of  movement. 

TAPE _ STATE 

is  the  position  of  the  tape  after  skipping  the  specified  number  of  tape  marks. 


Exceptions: 

USE_ ERROR  is  raised  If  MAGNETIC_TAPE  Is  not  the  value  of  the  attribute  FILE _ KIND  or 
the  node  associated  with  the  file  identified  by  TAPE_ DRIVE. 

STATUS  _  ERR  OR 

Is  raised  If  TAPE_DRIVE  Is  not  an  open  file  handle. 

DEVICE  _  ERROR 

Is  raised  If  an  input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 


5.3.0.14.  Writing  a  tape  mark 


procedure  •RITE_TAPE_MARK (TAPE_DMVE :  in  FILE  TYPE: 

HUMBER:  in  POSITIVE  1; 

TAPESTATE:  OUt  TAPE  POSITION) ; 


Purpose: 

This  procedure  writes  NUMBER  consecutive  tape  marks  on  the  tape  which  Is  mounted  on  the 
tape  drive  represented  by  the  file  Identified  by  TAPE_ DRIVE.  The  tape  Is  slopped  following 
the  last  tape  mark  written. 

Parameters: 

TAPE _ DRIVE  Is  an  open  file  handle  on  the  file  representing  the  tape  drive. 

NUMBER  Is  the  number  of  consecutive  tape  marks  to  be  written. 

TAPE _ STATE 

Is  the  new  position  of  the  tape. 


Exceptions: 

USE _ ERROR  is  raised  If  MAGNETIC _ TAPE  Is  not  the  value  of  the  attribute  FIEE_KIND  or 
the  node  associated  with  the  file  Identified  by  TAPE_DRIVE  or  If 
IS_LOADED(TAPE_  DRIVE)  Is  FALSE. 

MODE _ ERROR 

Is  raised  If  the  file  identified  by  TAPE_DRIVE  Is  of  mode  IN_FILE. 

STATUS _ ERROR 

Is  raised  If  TAPE  DRIVE  Is  not  an  open  file  handle. 
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DEVICE  _ERROR 

Is  raised  ir  -an  input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 

5.3.9.15.  Writing  a  volume  header  label 

procedure  volume_header (tape_drive :  in  file  type; 

VOLURE_IDEJrriFIER :  in  V0ui£tE_8TRING ; 

ACCESSIBILITY:  in  CHARACTER  :=’  '). 


Purpose: 

This  procedure  writes  a  volume  header  label,  as  described  in  TABLE  XI  on  the  tape  loaded  on 
the  tape  drive  represented  by  the  file  identified  by  TAPE _ DRIVE. 


The  accessibility  character  is  obtained  from  the  ACCESSIBILITY  parameter.  The  owner 
identification  is  the  user  name  Indicated  by  'CURRENT  _ USER.  The  Label-Standard  Version, 
which  Is  3,  indicates  the  ANSI  standard  version  to  which  these  labels  conform. 


Table  XI.  Volume  header  label 

Character 

Position 

Field  Haas 

Content 

1  to  3 

1 

Label  Identifier 

1  VOL 

4 

i 

Label  Nuaber 

|  1 

S  to  10 

1 

Volnae  Identifier 

1  Assign**  ptrmsntnily 

1 

1  by  oner  to  Identify 

1 

1  volnae 

11 

1 

Accessibility 

1  Indicates  restrictions 

1 

1  on  access  to  tbs 

1 

1  information  on  tbs 

1 

1  volnae 

13  to  37 

1 

Reserved  for  Fntnre 

1  Spaces 

1 

Standardization 

1 

SB  to  81 

1 

Oner  Identity 

1  Idsatiflss  owntr  of 

i 

t  solsss 

S3  to  79 

1 

Reserved  for  Fntnre 

1  Spsc** 

1 

Standardization 

i 

80 

1 

Label-Standard 

1  Indicates  tbs  version 

1 

Version 

1  of  tbe  ANSI  standard 

1 

1  to  vblcb  tbe  labels 

1 

1  and  data  formats  on  tbls 

1 

— 

1  volnae  conform 

Parameters: 


TAPE _ DRIVE  Is  an  open  file  handle  on  the  file  representing  the  tape  drive. 

VOLUME  _  IDENTIFIER 

is  a  six-character  string  giving  the  volume  name. 
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ACCESSIBILITY 

is  a  character  representing  restrictions  on  access  to  the  tape,  in  accordance  with 
(ANSI  78];  a  SPACE  indicates  no  access  control. 


Exceptions: 

USE_ ERROR  Is  raised  if  MAG NETIC __ TAPE  is  not  the  value  of  the  attribute  FILE_KIND  of 
the  node  associated  with  the  file  Identified  by  TAPE_DRIVE.  USE_ERROR  Is 
also  raised  If  the  tape  on  the  tape  drive  represented  by  the  file  Identified  by 
TAPE  _  DRIVE  was  loaded  as  an  unlabeled  tape  or  If  the  value  of 
VOLUME  _ IDENTIFIER  does  not  conform  to  the  syntax  of  an  Ada  Identifier. 
USE__ ERROR  is  also  raised  If  IS _ LOADED! TAPE _ DRIVE)  Is  FALSE  at  the  time 
of  the  call. 

MODE _ ERROR 

Is  raised  If  the  file  Identified  by  TAPE_DRIVE  is  of  mode  IN_FILE. 

STATUS _ ERROR 

is  raised  if  TAPE_ DRIVE  is  not  an  open  file  handle. 

DEVICE  _  ERROR 

is  raised  If  an  Input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 


5.3.0.16.  Writing  a  file  header  label 

procedure  fileheader (TAPE_DRIVE :  in  file  type; 

file”  identifier.  in  file_strihg. 
EXPIRATION_DATE :  in  STRING  :*■  99388* ; 
ACCESSIBILITY  :  in  CHARACTER  ; 


Purpose: 

This  procedure  writes  a  file  header  label,  as  described  In  TABLE  XU',  on  the  tape  loaded  on  the 
tape  drive  represented  by  the  file  Identified  by  TAPE_  DRIVE- 
Parameters: 
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Table  XII.  File  header  label 


Character 

Position 

Field  Haas 

Content 

1  to  3  1 

Latal  Identifier 

1  HDR 

i 

4  1 

Label  number 

i 

1  1 
( 

8  to  31  1 

File  Identifier 

< 

1  Assigned  permanently  by 

1  syetea  to  Identify  file 

1 

22  TO  27  1 

File  Set  Identifier 

1  The  VOLUMEIDENTIFIER 

1  m  the  file  set 

I 

28  to  31  1 

File  Section  Number 

1 

1  0001 

1 

1 

32  to  38  1 

File  Sequence  Mnaber 

1 

1 

1  Distinguishes  files  la  a 

1  file  set.  First  file  In 

1  set  gats  ‘0001‘.  For 

1  each  file  after. 

1  sequence  nnaber  Is 

1  incremented  by  one  baas  10. 

1 

38  to  38  ! 

Generation  Mnaber 

1 

1  0001 

1 

40  to  41  1 

Generation  Version 

Mnaber 

1 

1  00 

1 

1 

42  to  47  | 

Creation  Date 

I 

1  Date  file  header  Is 

1  written 

I 

48  to  83  1 

Expiration  Data 

1 

1  Date  on  vhlch  file  aay  be 

1  overwritten 

64  1 

Accessibility 

1 

1  Indicates  restrictions  on 

1  access  to  Information  In 

1  file 
| 

66  to  80  1 

Block  COUNT 

1 

1  000000 

1 

81  to  73  1 

Systea  Code 

I  Spaces 

74  to  80  1 

Reserved  for  Future 
Standardization 

1  Spaces 

Parameters: 

TAPE_  DRIVE  Is  an  open  file  handle  on  the  file  representing  the  tape  drive. 


FILE  _  IDENTIFIER 

Is  a  17-character  string  giving  the  file  name. 


EXPIRATION  _  DATE 

Is  a  string  Identifying  the  date  (8  characters  *  YYDDD'  where  YY  Is  the  year  and 
DDD  Is  the  day  (001-366))  the  file  may  be  overwritten.  When  the  expiration  date  Is 
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ft  spare  followed  by  5  zeroes,  the  file  has  expired.  ACCESSIBILITY 

Is  a  character  representing  restrictions  on  access  to  the  tape.  In  accordance  with 

(.ANSI  78);  a  SPACE  Indicates  no  access  control. 


Exceptions: 

USE_ERROR  Is  raised  If  MAGNETIC_TAPE  ts  not  the  value  of  the  attribute  Fn.E_KIN'D  of 
the  node  associated  with  the  file  Identified  by  TAPE_DRIVE.  l'SK_  ERROR  is 
also  raised  If  the  tape  on  the  tape  drive  represented  by  the  file  identified  by 
T APE _ DRIVE  was  loaded  as  an  unlabeled  tape  or  If  F1LE_IDKNT1FIKK  does  not 
conform  to  the  syntax  of  an  Ada  Identifier.  USE_ ERROR  is  also  raised  If 
IS  _  LOADED!  TAPE  _  DRIVE)  ts  FALSE  at  the  time  or  the  call. 

MODE  ERROR 

is  raised  If  the  file  Identified  by  TAPE _ DRIVE  Is  of  mode  IN_FILE. 

STATUS _ ERROR 

Is  raised  If  TAPE_ DRIVE  Is  not  an  often  file  handle. 

DEVICE  _  ERROR 

Is  raised  if  an  input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system. 

5.3.0.17.  Writing  an  end  of  file  label 

procedure  EKD  FILE_LABEL(TAPE_DRIVE:  in  FILE  TYPE); 


Purpose: 

This  procedure  writes  an  end  of  file  label,  as  shown  in  TABLE  XHI  on  the  tape  loaded  on  the 
tape  drive  represented  by  the  file  Identified  by  TAPE _ DRIVE. 


Table  Xm. 

End  of  file  label 

Character 

Position 

Field  Hue 

Contents 

1  to  3  1 

Label  Identifier 

1 

EOF 

4  1 

Label  Buber 

1 

1 

6  to  64  1 

Sue  aa  corresponding 

1 

Bus  aa  corresponding 

fields  In  file  header 

i 

fields  In  file  header 

label 

1 

label 

BB  to  60  1 

Block  COURT 

i 

Buber  of  blocks  in  file 

61  to  80  1 

Sue  u  corresponding 

1 

Sue  aa  corresponding 

fields  m  file  header 

t 

fields  m  file  header 

label 

1 

label 

Parameters: 


T.\PE_DRfVE  Is  an  open  file  handle  on  the  file  representing  the  tape  drive. 


t 
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Exceptions 

USE_  ERROR  Is  raised  If  MAGNETIC _TAPE  Is  not  the  value  of  the  attribute  FILE_K!N[>  of 
the  node  associated  with  the  file  identified  by  TAPE_ DRIVE.  USE _ ERROR  is 
also  raised  If  IS _ LOADED! TAPE  _DRFVE)  Is  FALSE  at  the  time  of  call  or  if  the 
tape  on  the  tape  drive  represent!  d  by  the  file  Identified  by  TAPE_DRIYK  was 
loaded  as  an  unlabeled  tape. 

MODE_ ERROR 

is  raised  If  the  file  Identified  by  TAPE_DRIVE  Is  of  mode  1N_F1LE. 

STATUS _ ERROR 

Is  raised  If  TAPE _ DRIVE  Is  not  an  open  file  handle. 

DEVICE  _  ERROR 

Is  raised  If  an  Input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  syst<  m. 

5.3.9.18.  Reading  a  label  on  a  labeled  tape 

procedure  readlabel  (Tape  drive  In  file  ttpe; 

LABEL:  Out  LABEL  STRIHC)  , 

Purpose: 

This  procedure  obtains  th  first  80  characters  of  the  next  available  block  and  returns  them  In 
LABEL 
Parameters: 

TAPE_DRrVE  is  an  open  file  handle  on  the  flic  represent  ing  the  tape  drive 
LABEL  Is  the  80-character  string  read  from  the  tape. 


Exceptions 

USE _  ERROR  is  raised  If  the  attempt  to  read  eighty  characters  encounters  a  tape  mark  or  if 
MAGNETIC_TAPE  Is  not  the  value  of  the  attribute  FtLE_KIND  of  the  node 
associated  with  the  file  Identified  by  TAPE_  DRIVE  or  If 
IS _LOAPED(TAPE_  DRIVE)  Is  FALSE  at  the  time  or  the  call  USE_  ERROR  Is 
also  raised  If  the  tape  on  the  tape  drive  represented  by  the  file  Identified  by 
TAPE_DRIVE  was  loaded  as  an  unlabeled  tape. 

STATUS  ERROR 

Is  raised  If  TAPE_DRIVE  Is  not  an  open  file  handle. 

DEVICE  _  ERROR 

Is  raised  If  an  Input  or  output  operation  cannot  be  completed  because  of  a 
malfunction  of  the  underlying  system  or  If  the  tape  Is  uninitialized. 
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SKAIU'H  _  ERROR 

Is  raised  If  there  Is  no  Item  with  the  name  NAMED. 


5.4.1.18.  Inserting  a  Hat-type  item  into  a  list 


procedure  insert  (LIST: 

in  out 

LIST_TYPE ; 

list_itbi 

in 

LIST~TYPE ; 

POSITION 

in 

COUNT)  ; 

procedure  insert  (list: 

in  out 

LISTJTTPE; 

LIST_ITEN 

in 

LI  ST  "TYPE  . 

NAMED 

in 

NAMESTRING 

POSITION 

in 

COUNT) ; 

procedure  insert  (list: 

in  out 

LIST_TYPE ; 

LIST_ITEN 

in 

LIST_TYPE ; 

NAMED 

in 

TOKEN_TYPE , 

POSITION 

in 

count! ; 

Purpose. 

This  procedure  inserts  a  list-type  Item  Into  a  list  artor  the  list  Item  specified  by  POSITION  A 
value  of  zero  In  POSITION  specifies  a  |>osition  at  the  head  of  the  list.  Subsequent  modifications 
to  the  values  of  LIST  or  of  LIST _  ITEM  do  not  affect  n  other  value. 

Parameters: 

LIST  Is  the  list  Into  which  the  Item  will  be  Inserted. 


LIST_ITEM  Is  the  value  of  the  Item  to  be  Inserted. 

POSITION  Is  the  position  In  the  list  after  *  nlch  the  item  Is  to  be  Inserted 

NAMED  Is  the  name  of  the  new  Item.  It  may  only  be  used  with  named  or  empty  lists. 

Exceptions: 

USE _ ERROR  is  raised  if  an  attempt  Is  mad  to  Insert  a  named  Item  Into  an  unnamed  list  or. 

conversely,  an  attempt  Is  mad-  to  insert  an  unnamed  item  Into  a  named  list  or  IT 

LIST  Is  a  named  list  that  aim  ly  contains  an  Item  with  the  name  NAMED  or  if 
POSITION  specifies  a  value  lar  *r  than  the  current  length  of  the  list. 


5.4.1.19.  Identifying  a  list-type  item  by  value  within  a  list 


function  POSITIOH  Hnf  VALUE  (LIST:  in  LIST  TYPE: 

VALUE:  in  LIST  TYPE; 

start_position:  in  position_count 

:=  POSITION^COUNT’ FIRST; 
EXPOSITION  :  in  POSITION~COUNT 

:=  POSITION  COUNT 'LAST) 


return  position  count; 


Purpose: 

This  funrtlon  returns  the  position  at  which  the  next  list-type  Item  of  the  given  value  Is  located. 
The  search  begins  at  the  START _ POSITION  and  ends  when  either  an  Item  of  value  VALUE  Is 
found,  the  last  Item  of  the  list  has  been  examined,  or  the  Item  at  the  END_POSITION  has 
been  examined,  whichever  comes  first. 
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This  funetlon  locates  a  list-type  item  In  a  list  and  returns  In  LIST _ ITEM  a  copy  of  it. 
Subsequent  modifications  to  the  values  of  LIST  or  to  the  value  returned  In  LIST_!TEM  do  not 
affect  the  other  value 
Parameters: 

LIST  Is  the  list  containing  the  Item  to  be  extracted 

POSITION  Is  the  position  within  the  list  that  Identifies  the  Item  to  be  extracted. 

LIST_!TEM  Is  the  value  of  the  list-type  Item  extracted. 

NAMED  Is  the  name  of  the  item  to  be  extrat  ed  It  may  only  be  used  with  named  lists. 

Exceptions: 

l’SE_ERROR  Is  raised  if  the  list  Is  empty  or  If  POSITION  has  a  value  larger  than  the  current 
length  of  the  list.  USE_ ERROR  Is  also  raised  If  NAMED  is  used  with  an  unnamed 
list  or  If  the  POSITION  specification  or  the  name  NAMED  identifies  an  Item  not  of 
list-type  kind. 

SEARCH  _  ERROR 

Is  raised  If  there  is  not  Item  with  the  name  NAMED. 


Exceptions: 

L'SK_KRROR  Is  raised  If  NAMED  Is  used  with  an  unnamed  list.  If  the  POSITION  specification  or 
the  name  NAMED  Identifies  an  Item  not  of  list-type  kind.  If  the  list  Is  empty  or  or 
If  POSITION  has  a  value  larger  than  the  current  length  of  the  list. 
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Parameters:  , 

LIST  Is  the  list  of  Interest. 

POSITION  Is  the  position  within  the  list  that  Identifies  the  item. 

NAME  Is  the  token  representation  of  the  name  of  the  Item  In  the  named  list. 

Exceptions: 

USE_ ERROR  Is  raised  If  LIST  Is  not  a  named  list.  If  POSITION  has  a  value  larger  than  the 
current  length  of  LIST. 


5.4.1.15.  Determining  the  position  of  a  named  item 

function  P0SITI0N_SY_NAM£  (LIST .  in  LIST_TYPE; 

named:  in  namestring) 
return  PosmoN_cowrr; 

function  POSITION_BYJtAME  (LIST  :  in  LIST_TYPE; 

NAMED :  in  TOKEN  TTPE) 
return  position  count. 


Purpose: 

This  function  returns  the  position  at  which  an  Item  with  the  given  name  NAMED  is  located  in 
LIST.  It  may  only  be  used  with  named  lists. 

Parameters: 

LIST  is  the  list  In  which  the  position  of  an  Item  Is  to  be  found  by  name. 

NAMED  Is  the  name. 

Exceptions: 

USE_  ERROR  Is  raised  If  LIST  Is  not  a  named  list  or  ir  the  list  Is  empty. 

SEARCH  _  ERROR 

Is  raised  If  NAMED  Is  not  a  name  of  an  Item  contained  In  the  list. 


5.4.1.10.  Extracting  a  list-type  item  from  a  list 


procedure  extract  (list  : 

in 

LIST_TTPE; 

POSITION . 

In 

POSITION _COUNT; 

LIST_ITEM : 

out  LIST_TYPE) 

procedure  extract  (list: 

in 

LIST  TYPE; 

NAMED: 

in 

NAME*  STRING; 

LIST_ITEJt: 

OUt  L1ST_TYPE) 

procedure  EXTRACT  (LIST : 

In 

LISTTYPE; 

NAMED: 

In 

T0KEN_TYPE ; 

LI£Tr_ITEM: 

OUt  LIST  TYPE)  ; 

Purpose: 
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Parameters: 

LIST  Is  the  list  of  Interest. 


Exceptions: 

None. 


5.4.1.13.  Determining  the  length  of  a  string  representing  a  Hat  or  a  list  item 


function  TEXT_LENGTH  (LIST : 

return  natural; 


in  LIST  TYPE) 


function  text_l£ngth  (list  . 

POSITI OR : 

return  positive; 


in  LIST  TTPE; 
in  position  count) 


function  TDfT_L£NGTH  (LIST : 

HARES: 

return  positive; 


in  LIST  TYPE; 
in  HARE  STRING) 


function  TEXT_LEHGTH  (LIST : 

HARED 

return  positive; 


in  LiSTjrrPE; 
in  TOKEN  TYPE) 


Purpose: 

This  function  returns  the  length  of  a  string  representing  either  a  list  or  the  list  Item  Identified 
by  POSITION  or  NAMED  In  a  list 
Parameters; 

LIST  Is  the  list  of  Interest. 

POSITION  Is  the  position  within  the  list  that  Identifies  the  item. 

NAMED  la  the  name  of  the  list  Item. 

Exceptions: 

USE__ERROR  Is  raised  If  POSITION  has  a  value  larger  than  the  (existing)  length  of  the  list  or  if 
the  parameter  NAMED  Is  used  with  an  unnamed  list. 

SEARCH  _  ERROR 

Is  raised  if  there  Is  no  Item  with  the  name  NAMED. 

5.4.1.14.  Determining  the  name  of  a  named  item 

procedure  itennaheclist.  in  list  type; 

POSITION:  in  POSITION_COUNT; 

HARE:  out  TOKEN  TYPE); 


Purpose: 

This  procedure  returns  In  NAME  the  token  representation  of  the  name  of  the  Item  In  the  namc; 
list,  as  spcelflcd  by  POSITION. 
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empty  list.  The  values  of  FRONT  and  BACK  are  not  affected.  Subsequent  modifications  to  the 
values  of  FRONT  or  BACK  or  to  the  value  of  the  returned  RESULT  list  do  not  affect  the  other 
list. 

Parameters: 

FRONT  is  the  first  list  to  be  merged. 

BACK  Is  the  second  list  to  be  merged. 

RESULT  Is  the  list  produced  by  the  merge;  It  has  the  list  Items  of  FRONT  In  Its  Initial 

sublist  and  those  of  BACK  as  the  rest  of  Its  Items. 

Exceptions: 

USE_ ERROR  Is  raised  if  FRONT  and  BACK  are  not  of  the  same  kind  and  neither  of  them  Is  an 
empty  list.  USE_ERROR  Is  also  raised  If  FRONT  and  BACK  are  both  named  and 
contain  an  Item  with  the  same  name. 


5.4.1.11.  Extracting  a  aubliat  of  items  from  a  lint 

function  srr_Dm»Acr(LiST:  in  listttpe  . 

position.  in  positconcouiit; 

LENGTH :  in  POSITIVE :  *  POSITIVE-LAST) 

return  list_tect; 


Purpose 

This  function  allows  a  (sub)llst  to  be  extracted  from  a  list.  The  returned  value  Is  a  copy  or  the 
list  subset  that  starts  at  the  Hem  at  POSITION  and  has  LENGTH  Items  In  It.  ir  there  are 
fewer  than  LENGTH  Items  In  this  part  of  the  list,  the  subset  extends  to  the  tall  or  the  list 

Parameters: 

LIST  Is  the  list  containing  the  subset  to  be  extracted. 

POSITION  Is  the  position  within  the  list  that  Identifies  the  subset  to  be  extracted. 

LENGTH  Is  the  length  of  the  subset. 


Exceptions: 

USE_ ERROR  Is  raised  if  POSITION  has  a  value  larger  than  the  current  length  of  the  list. 

5.4.1.12.  Determining  the  length  of  a  list 

function  LENGTH  (LIST,  in  LIST  TTPE) 
return  count; 


Purpose: 

This  function  returns  a  count  of  the  number  of  Items  In  LIST.  If  LIST  Is  empty,  LENGTH 
returns  sero.  «■ 
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LIST  to  the  list  of  interest. 

POSITION  to  the  position  within  the  list  that  Identifies  the  Item. 

NAMED  to  the  name  of  the  list  Item. 

'Exceptions: 

USE_ERROR  to  raised  If  the  parameter  NAMED  is  used  with  an  unnamed  list.  If  the  list  to  empty. 

If  there  to  no  Item  with  the  name  NAMED  or  If  POSITION  has  a  value  larger  than 
the  current  length  of  LIST. 

SEARCH  _  ERROR 

to  raised  If  there  to  no  Item  with  the  name  NAMED. 


S.4.1.0.  Inserting  a  gubliat  of  items  into  a  list 


procedure  SPLICE  (LIST: 

POSITIOS : 


S08_LIST : 


in  out  LIST  TYPE; 
in  posifiox_couirr. 

in  LIST_TEXT) ; 


procedure  splice  (LIST:  in  out  listjiype; 

position:  in  FOsrrioN_cou>fT; 

SUBLIST:  in  UETTYpi) ; 

Purpose: 

This  procedure  allows  a  list  to  be  Inserted  Into  a  list.  The  Items  In  the  list  to  be  inserted  will 
become  Items  in  the  resulting  list.  Subsequent  modifications  to  the  value  or  LIST  or  to  the  value 
of  SUB  LIST  do  not  affect  the  other  list. 


Parameters: 

LIST 

POSITION 
SUB  LIST 


to  the  list  Into  which  a  list  Is  to  be  inserted. 

to  the  position  after  which  the  new  items  will  be  Inserted. 

to  the  list  to  be  Inserted. 


Exceptions: 

USE__ERROR  Is  raised  If  SUB_LIST  as  LIST_TEXT  does  not  conform  to  the  syntax  specified  In 
TABLE  XIV.  USE_ ERROR  Is  also  raised  If  LIST  and  SUB_LIST  are  not  of  the 
same  kind  and  neither  of  them  Is  an  empty  list.  USE_ ERROR  Is  also  raised  If  LIST 
and  SUB_LIST  are  both  named  and  contain  an  Item  of  the  same  name  or  If 
POSITION  has  a  value  larger  than  the  current  length  of  the  list. 


5.4.1.10.  Merging  two  liatg 


procedure  verge  (front: 

BACK: 


RESULT: 


in  LIST_TYPE; 

in  LIST*  TYPE; 

in  out  LIST*  TYPE)  ; 


Purpose: 

This  procedure  returns  In  RESULT  a  list  constructed  by  concatenating  BACK  to  FRONT.  The 
lists  FRONT  and  BACK  must  be  of  the  same  kind  or  either  FRONT  or  BACK  must  be  an 
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Purpose: 

This  procedure  deletes  the  Item  specified  by  POSITION  or  NAMED  from  LIST.  If  this  was  the 
last  Item  In  the  list,  the  kind  of  the  list  changes  to  EMPTY. 

Parameters: 

LIST  Is  the  list  from  which  the  Item  wdl  be  deleted. 

POSITION  Is  the  position  within  the  list  that  Identifies  the  Item  to  be  deleted. 

NAMED  Is  the  name  of  the  list  Item  to  be  deleted. 


Exceptions: 

USE_ERROR  is  raised  If  the  parameter  NAMED  is  used  with  an  unnamed  list.  If  the  list  Is  empty, 
If  there  is  no  Item  with  the  name  LAMED  or  If  POSITION  has  a  value  larger  than 
the  current  length  of  LIST. 

SEARCH  _  ERROR 

Is  raised  If  there  Is  no  Item  with  the  name  NAMED. 

6-4. 1.7.  Determining  the  kind  of  list 

function  GETLISTKINDCLIST:  in  LIST  TYPE) 
return  LIST  kind; 


Purpose: 

This  function  returns  the  kind  of  the  referenced  h  -t. 
Parameters: 

LIST  Is  the  list  of  Interest. 


Exceptions: 

None. 


5.4. 1.8.  Determining  the  kind  of  list  item 

function  get_itemjcind(list:  in  ljst  type; 

POSITION :  in  FOSmON_COWT) 

return  itemjcind; 

function  GET_ITEN_KI«D(LIST:  in  LIST  TYPE; 

MANED:  in  NANI  STRING) 
return  itemjcind; 

function  GET_  ITEMJCIND  (LI  ST:  in  LIST  TYPE; 

NAMED:  in  TON  iN_TYPE) 
return  itemjcind; 


Purpose. 

This  function  returns  the  kind  of  an  Item  In  the  r  fereneed  list. 


Parameters: 
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5. 4.1. 4.  Converting  to  an  external  list  representation 

function  tdjtext  (list_item:  in  listj-tpe) 
return  list  text; 


Purpose: 

This  function  returns  the  external  representation  of  the  value  of  the  LIST_ITEM  parameter. 
The  representation  Is  the  string  representation  defined  In  Section  5.4. 

Parameters: 

LIST  ITEM  Is  the  list  to  be  converted. 


Exceptions: 

None. 


5.4.I.5.  Determining  the  equality  of  two  lists 

function  IS_EOUAL  (LISTl :  in  LISTTTPE; 

LISTS:  In  LISTTTPE) 
return  BOOLEAN; 

Purpose: 

This  function  returns  TRUE  If  the  values  of  the  two  lists  LISTl  and  LIST2  are  equal  according 
to  the  following  rules;  otherwise.  It  returns  FALSE. 

Two  values  of  type  LIST_TYPE  are  equal  If  and  only  IT: 

a  both  lists  are  of  the  same  kind  (l.e.,  named,  unnamed  or  empty),  and 

b.  both  lists  contain  the  same  number  of  list  Items,  and 

c.  for  each  position,  the  values  of  list  Items  at  this  position,  as  obtained  by  an  EXTRACT 
operation,  are  of  the  same  kind  and  are  equal  under  the  equality  defined  for  this  kind, 
and 

d.  In  the  case  of  named  lists,  for  each  position,  the  names  of  the  list  Items  at  this  position 
are  equal  under  TOKEN _TYPE  equality  (l.e..  IS  _  EQUAL). 

Parameters: 

LISTl.  LIST2  are  the  lists  whose  equality  Is  to  be  determined. 


Exceptions: 

None. 


6.4.I.0.  Deleting  an  item  from  >  liat 


procedure  delete(LIST:  in  out  hst_ttpe; 

POSITION:  In  POSITION  COUNT) ; 


procedure  delete  (LIST  . 

NAMED: 


In  out  listjttpe; 
in  NAME "STRING) ; 


procedure  delete  (LIST: 

NAMES: 


in  out  LisTjrrPE; 
in  TOKEN  TYPE); 
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CONSTRAINT _ ERROR  Is  raised  If  an  attempt  Is  made  to  convert  a  value  to  a  numeric  type  when 
the  value  does  not  satisfy  the  constraints  for  that  type. 

5.4. 1.2.  Copying  a  list 

procedure  copy (TD_list  :  out  LIST_TTPE; 

FRO*  LIST:  in  LIST  TYPE)  ; 


Purpose: 

This  procedure  returns  In  the  parameter  TO  _ LIST  a  copy  of  the  list  value  of  the  parameter 
FROM  _ LIST.  Subsequent  modifications  of  either  list  do  not  afreet  the  other  list. 

Parameters: 

TO _  LIST  is  the  list  returned  as  a  copy  of  the  value  of  FROM _  LIST. 

FROM_LIST  Is  the  list  to  be  copied. 


Exceptions: 

None. 


5.4.I.3.  Converting  to  an  internal  list  representation 
procedure  to  list clist  striuc :  in  string: 

LIST:  OUt  LIST  TYPE) ; 

Purpose: 

This  procedure  converts  the  string  representation  of  a  list  into  the  Internal  list  representation. 
It  establishes  the  list  as  a  named,  unnamed,  or  empty  list.  The  Individual  list  Items  are  classified 
according  to  their  external  representation.  For  a  numeric  Item  value,  the  item  is  classified  as  an 
Integer  Item  If  the  numeric  value  can  be  interpreted  as  a  literal  of  universal  _ Integer  type; 
otherwise,  the  numeric  Item  Is  classified  as  a  floating  point  Item.  Blanks,  format  effectors  and 
non-printing  characters  are  allowed  In  the  value  of  the  parameter  LJST_STRING. 

Parameters: 

LIST  _  STRING 

Is  the  string  to  be  interpreted  as  a  list  value. 

LIST  is  the  list  built  and  returned  according  to  the  contents  of  LIST  STRING. 


Exceptions: 

USE_  ERROR  Is  raised  If  the  value  of  the  parameter  LIST  _ STRING  does  not  conform  to  the 
syntax  of  TABLE  XTV.  Blanks,  format  effectors  and  non-prlntlng  characters  are 
allowed  between  lexical  or  syntactic  elements  of  this  syntax. 

CONSTRAINT_  ERROR 

Is  raised  If  a  numeric  literal  In  the  LIST_ STRING  parameter  designates  a  value 
which  cannot  be  represented  as  the  value  of  an  Item  In  the  LIST  result. 
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c.  For  an  identifier  list  Item  or  the  name  of  a  list  Item,  the  external  string  representation  Is 
the  Identifier  string  in  upper  case  characters. 

d.  For  a  quoted  string  list  item,  the  external  string  representation  Is  the  string  literal 
representing  the  value  of  the  list  Item  (l.e.,  the  string  value  enclosed  by  quotation 
characters  and  with  Inner  quotation  characters  doubted). 

e.  for  a  list  as  a  list  Item,  the  external  string  representation  Is  the  external  representation  of 
the  value  of  the  list. 

f.  for  a  list,  the  external  string  representation  of  Its  value  Is  the  string  representation 
composed  of  the  external  representation  of  Its  list  Items  according  to  the  syntax  of  Table 
XIV  without  blanks,  formal  effectors  or  non-prlnllng  characters  between  the  lexical  or 
syntactic  constituents  of  the  syntax. 


6.4.1.  Package  LIST^UTILITIES 

This  package  defines  types,  subtypes,  constants,  exceptions  and  general  list  manipulation  interfaces. 
The  latter  are  supplemented  by  generic  subpackages  for  the  manipulation  of  list  Items  of  numeric 
type. 


5. 4. 1.1.  Types  and  subtypes 


type  LisTjnrre 
type  tdke5_ttpe 

type  LISTjaxD 
type  ITEXjcikd 

subtype  LISTTEXT 
subtype  name ’string 
type  coiner 


Is  limited  private; 

is  limited  private; 

is  (UNNAMED.  NAMED,  EMPTY); 

is  (LIST  ITEM.  STRING  ITEM.  INTEGERITEN. 

FLOAT  ITEM.  IDENTIFIERITEM) ; 
is  STRING; 
is  STRING; 

is  range  o  ..  integer  "last. 


subtype  position  count  is  count  range  count -first  ♦  l  . .  count- last; 


LIST _ TYPE  describes  the  type  for  lists.  TOKEN_TYPE  describes  the  type  for  Internal 
representations  of  Identifiers.  LIST_K!ND  enumerates  the  kinds  of  lists.  ITEM_KIND  enumerates 
the  kinds  of  list  Items.  LIST_TEXT  Is  the  type  of  a  list's  external  representation.  NAME_STRING 
Is  the  type  of  an  Identifier  or  of  an  Item's  name  in  a  named  item  In  Its  external  representation. 
COUNT  describes  the  type  for  the  length  of  a  list.  POSITION_COUNT  describes  the  type  for  the 
position  of  an  Item  In  a  non-empty  list. 


EMPTY  LIST  :  constant  LIST  TYPE; 


EMPTY_LIST  Is  a  deferred  constant  denoting  the  value  of  an  empty  list.  Any  Implementation  of 
the  CAIS  must  ensure  that  IS_EQUAL(EMPTY_LIST,  X)  Is  TRUE  for  any  object  X  of  type 
L1ST__TYPE  whose  value  Is  an  empty  list. 


SEARCH _ ERROR  :  exception; 


CONSTRAINT_ ERROR:  exception; 


SEARCH _ ERROR  Is  raised  If  a  search  for  an  Item  falls  because  the  Item  Is  not  present  In  the  list. 
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(sub)llst.  Operations  to  delete  an  Item  or  a  set  of  Items  are  also  provided.  Insertion  and  deletion 
operations  will  adjust  tbe  ordinal  positions  of  Items  after  the  Inserted  or  deleted  Items. 


The  value  of  an  entity  of  type  LIST _ TYPE  can  be  represented  externally  to  the  packer 
LIST _ UTILITIES  as  a  string.  Interfaces  are  provided  to  convert  between  entitles  of  type  STRING, 
containing  a  string  value  consistent  with  the  syntax  of  this  external  representation,  and  entitles  of 
type  LIST _ TYPE.  An  object  of  type  LIST_TYPE  has  as  its  Initial  value  the  empty  list.  The  BNF 
for  a  list’s  external  representation  is  given  In  TABLE  XTV. 


Table  XIV.  List  external  representation  BNF 


list  aaasd_list 

I  uaaasdJUst 
I  •wpty_ll«t 

naatd  llst  :  :=  (aaaad  ltaa  {  ,  undjtn  }  ) 

aaaaa«d_llat  (lt«a  <  ,  Item  }  ) 

•mpty_ll*t  : : *  0 

aaa«d_lt«a  aaas_strlBg  *>  ltaa 

ltam  : :*  list 

I  qaot*d_strlDg 
I  lDt»g»r_Busb»r 

I  float_Bdabsr 
I  ldsatlflsr 

lBtsg«r_aaabsr  : :=  latsgar 
float_Boab«r  : :■  d«clBAl_llt«ral 
qaot«d_strlBg  :  :*  striBg_llt«ral 
Baa«_strlBg  ldsatlflsr 


dotation : 

1 .  words  -  syntactic  categories 
3.  [  ]  -  optional  items 

3.  <  >  -  an  itea  repeated  zero  or  more  times 

4.  I  -  separates  alternatlvss 


The  CAJS  defines  a  canonical  external  string  representation  for  values  of  type  L!ST_TYPE.  The 
string  subtype  LIST_TEXT  Is  used  In  the  CAJS  interfaces  for  string  values  that  adhere  to  this 


canonical  external  representation.  This  external  representation  is  obtained  by  applying  the 


TO_TEXT  operation  to  a  value  of  type  LIST_TY1’E  or  to  a  value  that  is  a  legal  value  of  a  list 
Item. 


The  canonical  external  string  representation  of  a  value  of  type  LIST_TYPE  and  of  Its  list  Items  Is 
defined  as  follows: 

a.  For  an  Integer  list  Item,  the  external  string  representation  Is  the  decimal  representation  of 
its  numeric  value  without  leading  zeroes. 

b.  For  a  floating  point  list  Item,  the  external  string  representation  is  the  string  Image  of  Its 
numeric  value  In  decimal  notation  with  a  format  as  obtained  under  Implementation-defined 
settings  of  the  FORE,  AFT,  and  EXP  parameters  In  PUT  operations  of  Ada  TEXT_IO 
(see  [LRM]  14.3.8).  These  settings  of  FORE,  AFT,  and  EXP  must  guarantee  that  quality 
of  the  external  representation  Implies  equality  of  the  Internal  representation  and  vice  versa 
within  the  limitations  Imposed  by  the  accuracy  of  numeric  comparisons  In  Ada. 
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5.4.  CAIS  Utilities 

This  section  defines  the  abstract  data  type  LIST_TYPE  for  use  by  ether  CAJS  Interfaces.  The  value 
of  an  entity  of  type  LIST_TYPE  (referred  to  as  a  list)  Is  a  linearly  ordered  set  of  data  elements 
called  list  items. 

ft  Is  possible  to  associate  a  name  with  a  list  Item.  If  no  name  Is  associated  with  a  list  Item,  the  Item  Is 

an  unnamed  item.  If  a  name  Is  associated  with  a  list  Item,  the  Item  is  a  named  item.  A  list  can 

either  contain  all  unnamed  Items,  In  which  case  It  Is  called  an  unnamed  list,  or  all  named  items,  in 
which  case  It  Is  called  a  named  list,  but  not  both.  If  a  list  contains  all  named  Items,  names  among 
these  Items  must  be  unique.  An  empl>  list  Is  a  list  which  contains  no  Items.  Such  a  list  Is  not 

considered  to  be  either  named  or  unnamed.  An  empty  list  can  be  obtained  by  using  the 

EMPTY_LIST  constant  or  the  DELETE  procedure.  The  type  LIST_KIND  enumerates  these  three 
classifications  of  lists. 

Associated  with  each  list  item  Is  a  classification,  or  kind.  List  items  are  classified  as  strings,  integers, 
float  numbers,  identifiers  and  lists.  The  kind  of  an  Item  is  a  value  of  the  enumeration  type 
ITEM_KIND,  The  CAIS  interfaces  allow,  but  do  not  require,  an  Individual  implementation  of  the 
CAIS  to  employ  efficient  mechanisms  for  representing  identifiers  as  part  or  lists.  Towards  this 
purpose,  a  private  type  TOKEN _  TYPE  Is  Introduced,  which  allows  Identifiers  to  be  manipulated  as 
Internal  representations  called  tokens.  Interfaces  are  provided  to  transform  identifiers  In  the  form  of 
a  NAME_STR1NG  Into  a  TOKEN_TYPE  and  vice  versa.  NAME_STRING  is  a  subtype  of 
STRING,  whose  values  are  assumed  to  conform  to  the  syntax  of  Ada  Identifiers.  Tokens  are  equal  if 
and  only  If  their  external  representations  are  equal  under  string  comparison,  excepting  differences  in 
upper  and  lower  case  notation. 

The  names  of  list  Items  In  a  named  list  may  be  Internally  represented  as  tokens.  Overloaded  Interfaces 
are  provided  In  the  CAIS  that  allow  the  names  of  list  Items  within  a  named  list  to  be  specified  by 
parameters  of  either  NAME_STRING  or  TOKEN_TYPE  type. 

The  specifications  within  this  package  allow  for  the  manipulation  of  lists  which  are  of  unnamed, 
named  or  empty  kind.  If  a  parameter  of  an  Interface  specifies  an  Item  by  position,  then  that  Interface 
may  be  used  with  either  unnamed  lists  or  named  lists.  If.  however,  a  parameter  specifies  an  Item  by 
name,  tf  *n  the  associated  interface  may  only  be  used  with  named  lists. 

Items  of  a  list  can  be  manipulated  by: 

a.  extracting  Items  from  a  list. 

b.  replacing  or  changing  values  of  Items  In  a  list,  and 

c.  inserting  new  Items  Into  a  list. 

These  operations  are  provided  by  the  EXTRACT,  REPLACE,  and  INSERT  subprograms, 
respectively.  Packages  are  provided  to  allow  such  operations  to  be  performed  directly  on  strings. 
Identifiers  and  lists.  Operations  on  the  numeric  types  are  provided  with  generic  packages. 

The  position*  In  the  11*1  where  these  operations  are  specif  -d  to  take  place  arc  usually  designated  by 
the  parameter  POSITION.  With  named  lists  a  particular  Item  ran  be  specified  by  a  name.  This  Is 
possible  since  such  names  by  definition  are  unique.  Specifying  a  particular  Item  by  name  Is  only 
permitted  with  EXTRACT  and  REPLACE  operations. 

Insertion  operations  can  also  be  performed  on  sets  of  Items.  A  set  would  then  effectively  constitute  a 
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IMPORT (NODE . HOST_FIL£_NAME) ; 
CLOSE  (MODE)  ; 
exception 

when  others  => 

CLOSE (MODE) ; 
raise; 

end  IMPORT; 


5.3.10.2.  Exporting  a  file 

procedure  export  (mode;  in  mode  type; 

HOST  FILE  SAME :  in  STRING) ; 


Purpose: 

This  procedure  creates  a  new  file  named  HOST _FILE_  NAME  In  the  host  file  system  and 
copies  the  contents  of  the  file  node  identified  by  NODE  Into  it. 


Parameters: 

NODE  Is  an  open  node  handle  on  the  file  node. 

HOST  _  FILE  _  NAME 

Is  the  name  of  the  host  file  to  be  created. 


Exceptions: 

NAME  _  ERROR 

Is  raised  If  the  node  Identified  by  NODE  Is  Inaccessible. 

USE_ERROR  Is  raised  if  HOST  _  FILE  _  NAME  does  not  adhere  to  the  required  syntax  for  file 
names  in  the  host  file  system  or  If  HOST _  FILE _ NAME  cannot  be  created  in  the 
host  file  system.  USE_ERROR  Is  also  raised  If  FILE  Is  not  the  value  of  the 
attribute  KIND  of  the  node  identified  by  NODE. 

ST ATUS_ ERROR 

Is  raised  If  NODE  Is  not  an  open  node  handle. 

INTENT_  VIOLATION 

is  raised  If  NODE  was  not  opened  with  an  intent  establishing  the  right  to  read 
contents. 


Additional  Interface: 

procedure  EXPORT  (NAME :  in  namestring; 

HOST  FILE  NAME:  in  STRING); 

i*  " 

MODE : NODE_TYPE ; 
begin 

OPEN (NODE, NAME. (1=>READ  CONTENTS)); 

EXPORT (NODE, HOST  FILE  NAME); 

CLOSE  (NODE); 
exception 

when  other*  *> 

CLOSE (NODE) ; 
raise; 
end  EXPORT; 
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6.3.10.  Package  FCLE,^MPORT-.EXPORT 

The  CA1S  allows  a  particular  CAIS  Implementation  to  maintain  files  separately  from  files  maintained 
by  the  host  file  system.  This  package  provides  the  capability  to  transfer  files  between  these  two 
systems. 

5.3.10.1.  Importing  a  file 

procedure  import (node  in  hcde_type; 

H0ST_FIlf  JWWE :  in  STRING)  ; 


Purpose: 

This  procedure  searches  for  a  file  in  the  host  file  system  named  HOST_FILE_  NAME  and 
copies  its  contents  Into  a  CAJS  file  which  Is  the  contents  of  the  node  identified  by  NODE.  It  also 
copies  any  file  characteristic  Information  which  must  be  maintained  by  the  CAIS 
Implementation. 

Parameters: 

NODE  is  an  open  node  handle  on  the  file  node. 

HOST  _  FILE  _  NAME 

is  the  name  of  the  host  file  to  be  copied. 


Exceptions: 

NAME_  ERROR 

Is  raised  If  the  node  identified  by  NODE  Is  Inaccessible. 

USE_ERROR  Is  raised  If  HOST_FILE__>NAME  does  not  adhere  to  the  required  syntax  for  nie 
names  In  the  host  file  system  or  if  HOST__FlLE_  NAME  does  not  exist  in  the  host 
file  system.  USE__ERROR  Is  also  raised  If  FILE  Is  not  the  value  of  the  attribute 
KIND  of  the  node  Identified  by  NODE. 

STATUS _ ERROR 

Is  raised  if  NODE  is  not  an  open  node  handle. 

INTENT  _  VIOLATION 

is  raised  if  NODE  was  not  opened  with  an  intent  establishing  the  right  to  write 
contents. 

SECURITY  _  VIOLATION 

Is  raised  If  the  operation  represents  a  violation  of  mandatory  access  controls. 
SECURITY  _  VIOLATION  is  raised  only  If  the  conditions  for  other  exceptions  are 
not  present. 


Additional  Interface: 

procedure  import (NAME:  In  Nakestrinc. 

HOST  FILE  NAME:  In  STRING) 

la  '  " 

NODE :  NC0E_TfPE; 
begin 

0PEN(N0PE, NAME. (1*>NRITE  CONTENTS}) ; 
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LIST  Is  the  list  in  which  the  position  of  an  Item  is  to  be  found. 

VALUE  Is  the  list-type  Item  value. 

START  _  POSITION 

is  the  position  of  the  first  Item  to  be  considered  in  the  search. 

END  _  POSITION 

is  the  position  beyond  which  the  search  v.ill  noi  proceed;  the  search  may  terminate 
prior  to  reaching  ENT)_POSITION  should  the  sought  list-type  item  be  found  or 
should  the  last  element  of  the  list  be  considered. 


Exceptions: 

USE_ERROR  Is  raised  If  START_ POSITION  specifies  a  value  larger  than  the  current  length  of 
the  list,  If  the  list  Is  empty  or  If  END_  POSITION  is  less  than 
START  _  POSITION. 

SEARCH_ ERROR 

is  raised  If  the  VALUE  specified  is  not  found  within  the  region  specified  by 
START _ POSITION  and  RND_POSITION. 

5.4.1.20.  Package  IDENTIFIER _ ITEM 

This  package  provides  interfaces  for  the  manipulation  of  list  items  whose  values  are  Identifiers  and  or 
names  of  list  Items.  Such  names  and  values  are  represented  Internally  as  values  of  type 
TOKEN_TYPE. 

5.4.1.20.1  Converting  an  identifier  to  a  token 

procedure  T0_TOKEN  (IDENTIFIER :  in  NAME_CTRINC; 

TOKEN  OUt  TOKEN  TfPE)  ; 

Purpose: 

This  procedure  converts  the  string  representation  of  an  Identifier  Into  the  corresponding  Internal 
token  representation. 

Parameters: 

IDENTIFIER  Is  the  string  to  be  converted  to  a  tolen. 

TOKEN  Is  the  token  built  and  returned  according  to  the  value  of  IDENTIFIER. 


Exceptions; 

USE_KRROR  Is  raised  If  the  value  of  the  paramrt  r  IDENTIFIER  does  not  conform  to  the  syntax 
of  an  Ada  Identifier. 
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6.4.1.20.2  Converting  a  token  to  an  identifier 

function  to_text(list_iten.  in  tokejj  type) 
return  nake'string; 

Purpose: 

This  function  returns  the  external  representation  of  the  value  of  the  MST_ITBM  parameter 
The  external  representation  is  the  string  representation  defined  In  Section  5.4.  It  adheres  to  the 
syntax  required  for  NAME_STR1NG.. 

Parameters: 

LIST  ITEM  Is  the  Item  expressed  as  a  token. 


Exceptions: 

None. 


5.4.1.20.3  Determining  the  equality  of  two  tokens 
function  is_equal(-qkeni  -.  in  token  type. 

TOKENS :  in  TOKEN  TYPE) ; 

return  boolean; 

Purpose: 

This  function  returns  TRUE  If  the  two  tokens  TOKEN!  and  TOKEN2  represent  Ada  Identifiers 
whose  string  representation  is  equal  under  string  comparison,  excepting  differences  In  upper  and 
lower  case  notation:  otherwise,  It  returns  FALSE. 

Parameters: 

TOKEN  I.  TOKEN2 

are  the  tokens  whose  equality  Is  to  be  determined. 


Exceptions: 

None. 


5.4.1.20.4  Extracting  an  identifier  item  from  a  Hat 


procedure  extract  (LIST: 

POSITION 


TOKEN: 


In  LIST  TYPE; 
in  POSITIONCOUNT; 
out  TOKEN  TYPE) ; 


procedure  extract  (LIST: 

NAKED: 

TOKEN: 


in  LISTTYPE; 
in  NAK£_STRING; 

out'  TOKEN  TYPE)  ; 


procedure  extract  (list: 

NAKED: 

TOKEN. 


in  LIST_TYPE; 
in  TOKEN_TYPE; 

OUt  TOKEN  TYPE); 


Purpose: 

This  function  locates  an  Identifier  Item  In  a  list  and  returns  In  TOKEN  a  copy  of  Its  token. 
Parameters: 

LIST  Is  the  list  containing  the  Item  to  be  extracted. 
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POSITION  Is  the  position  within  the  list  that  Identifies  the  Item  to  be  extracted. 

TOKEN  Is  the  token  representation  of  the  Identifier  Item. 

NAMED  Is  the  name  of  the  Item  to  be  extracted.  It  may  only  be  used  with  named  lists. 

Exceptions: 

USE_ERROR  Is  raised  If  NAMED  Is  used  with  an  unnamed  list  ,lf  the  POSITION  specification  or 
the  name  NAMED  identifies  an  item  not  of  token  type  If  the  list  is  empty  or  If 
POSITION  has  a  value  larger  than  the  current  length  of  the  list. 

SEARCH  _  ERROR 

is  raised  If  there  Is  no  Item  with  the  name  NAMED. 


Exceptions: 

USE_ERROR  is  raised  If  NAMED  Is  used  with  an  un.  ^med  list,  If  the  POSITION  specification  or 
the  name  NAMED  Identifies  an  Item  not  of  Identifier  kind,  If  the  list  Is  empty,  or  If 
POSITION  has  a  value  larger  than  the  current  length  of  the  list. 

SEAIK'I  I  _  ERROR 

Is  raised  If  there  is  no  Item  with  the  name  NAMED. 
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5.4.1.20.0  Inserting  an  identifier  item  into  *  list 


procedure  insert (list : 

LIST_I7EM : 
POSITION : 


in  OUt  LIST_TTPE; 

In  toke5_ttpe ; 

in  COUNT); 


procedure  iksert  (list  : 

LIST_ITEM: 
NAMED : 
POSITION: 


in  out  LIST  TYPE; 
in  TOKEM  TYPE; 

in  NAME  STRING; 

in  count); 


procedure  iksertClist.  in  out  list  type. 

LIST_ITEM .  in  T0KEN_TYPE; 

NAMED  :  in  TOKEn'tYPE. 

POSITION  :  in  COUNT)"; 

Purpose. 

This  procedure  Inserts  sn  Identifier  Item  Into  a  list  after  the  list  Item  specified  by  POSITION. 
A  value  of  zero  In  POSITION  specifies  a  position  at  the  head  of  the  list. 

Parameters: 


LIST 


Is  the  list  Into  which  the  Item  will  be  inserted. 


LIST_ITEM  is  the  value  of  the  Item  to  he  Inserted. 

POSITION  Is  the  position  In  the  list  after  which  the  Item  is  to  be  Inserted. 

NAMED  Is  the  name  of  the  new  Item.  It  may  only  be  used  with  named  or  empty  lists. 


Exceptions. 

USE__  ERROR  is  raised  If  an  attempt  is  made  to  insert  a  named  Item  into  an  unnamed  list  or. 

conversely,  an  attempt  Is  made  to  Insert  an  unnamed  item  Into  a  named  list  or  if 
LIST  is  a  named  list  that  already  contains  an  Item  with  the  name  NAMED 
USE_ERROR  Is  also  raised  if  POSITION  specifies  a  value  larger  than  the  current 
length  of  the  list. 


5.4.1.20.7  Identifying  an  identifier  item  by  value  within  a  list 

function  position_bt_value(list.  in  list  type; 

VALUE:  in  TDKEN_TYPE; 

START_P0SIIT0N :  in  POSITION_COUNT 

:=  POSITIONCOUNT' FIRST; 
END_P0SITI0N  :  in  POSITION  COUNT 

:*  POSITION_COUNT  'LAST) 

return  position  count; 


Purpose: 

This  function  returns  the  position  at  which  the  next  identifier  llcm  of  the  given  value  Is  located 
The  search  begins  at  the  START _ POSITION  and  ends  when  either  an  Item  of  value  VALUE  Is 
found,  the  last  Item  of  the  list  has  been  examined,  or  the  item  at  the  KND_  POSITION  has 
been  examined,  whichever  comes  first. 

Parameters: 


LIST 


Is  the  list  In  which  the  position  of  an  Item  Is  to  be  found  by  value. 
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VALUE  Is  the  Identifier  Item  value  (token). 

START  _  POSITION 

is  the  position  of  the  first  Item  to  be  considered  In  the  search. 

END  _  POSITION 

Is  the  position  beyond  which  the  search  will  not  proceed;  the  search  may  terminate 
prior  to  reaching  END_POSITION  should  the  sought  identifier  item  be  found  or 
should  the  last  element  of  the  list  be  considered. 


Exceptions: 

USE_  ERROR  Is  raised  If  START _  POSITION  specifies  a  value  larger  than  the  current  length  of 
the  list.  If  the  list  Is  empty  or  If  END  _  POSITION  Is  less  than 
START  _  POSITION. 

SEARCH  _  ERROR 

Is  raised  If  the  VALUE  specified  Is  not  found  within  the  region  specified  by 
ST ART_ POSITION  and  END_POSITION. 

6.4.1.21.  Generic  package  INTEGER _ ITEM 

This  Is  a  generic  package  for  manipulating  list  Items  which  are  Integers.  This  package  must  be 
Instantiated  for  the  appropriate  Integer  type  (Indicated  by  NUMBER  In  the  specification). 

6.4.1.21.1  Converting  an  integer  item  to  ita  canonical  external  representation 

function  TO _TEXT<LIST_rrEM:  in  HUMBER) 
return  STRING; 


Purpose: 

This  function  returns  the  external  representation  of  the  value  of  the  L!ST_ITEM  parameter. 
The  external  representation  is  the  string  representation  defined  In  Section  5.4. 

Parameters: 

LIST_ITEM  Is  the  Integer  Item  whose  external  representation  Is  to  be  returned. 


Exceptions: 

None. 


6.4.1.21.2  Extracting  an  integer  item  from  a  list 

function  EXTRACT  (LIST :  in  LISTTTPE; 

POSITION:  in  POSITION_COUNT) 
return  number; 

function  EXTRACT  (LIST  :  in  LIST  TYPE; 

NAMED:  in  PtAME~ STRING) 
return  number; 

function  EXTRACT  (LIST  :  in  LIST  TTPE; 

NAMED :  in  TOKENJITPE) 
return  number; 
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This  function  locates  an  Integer  Item  In  a  list  and  returns  a  copy  of  Its  numeric  value. 
Parameters: 


LIST  is  the  list  containing  the  Item  to  be  extracted. 


POSITION  is  the  position  within  the  list  that  Identifies  the  Item  to  be  extracted. 

NAMED  Is  the  name  of  the  Item  to  be  extracted.  It  may  only  be  used  with  named  lists 


Exceptions. 

USE_ERROR  Is  raised  if  NAMED  Is  used  with  an  unnamed  list.  If  the  POSITION  specification  or 
the  name  NAMED  Identifies  an  Item  not  of  Integer  kind,  If  the  list  Is  empty  or  If 
POSITION  has  a  value  larger  than  the  current  length  of  the  list. 

SEARCH  _  ERROR 

is  raised  If  there  Is  no  Item  with  the  name  NAMED. 

CONSTRAINT  _  ERROR 

Is  raised  If  the  value  to  be  extracted  violates  the  constraints  of  the  type  designated 
by  NUMBER. 


5.4.1.21.3  Replacing  an  integer  item  in  a  list 


procedure  REPLACE  (LIST:  in  out  LIST_TTPE; 

LIST  ITEM:  in  nuuber; 
position  in  pos  m or  court)  ; 


procedure  replace  (list:  in  out  LISTjnfPE; 

LISTITEX:  in  NUMBER; 

RAXED  in  RARE  STRING) ; 


procedure  REPLACE  (LIST :  in  out  LISTTTPE; 

LIST_rrEX:  in  NUMBER; 
■AXED  :  in  TOKEMTYPE) ; 


Purpose; 

This  procedure  replaces  the  value  of  an  Integer  Hem  In  a  list. 

Parameters 

LIST  Is  the  list  containing  the  Item  to  be  replaced. 

LIST _ ITEM  Is  the  new  value  of  the  Item. 

POSITION  Is  the  position  within  the  list  that  Identifies  the  Item  to  be  replaced. 

NAMED  Is  the  name  of  the  item  to  be  replaced,  it  may  only  be  used  with  named  lists. 

Exceptions. 

USE_  ERROR  Is  raised  If  NAMED  Is  used  with  an  unnamed  list  or  If  the  POSITION  spcTiricallon 
or  the  name  NAMED  Identifies  an  Item  not  of  Integer  kind.  If  the  list  Is  empiy  or  If 
POSITION  has  a  value  larger  than  the  current  length  of  the  list. 
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SEARCH  _  ERROR 

Is  raised  If  there  Is  no  Item  with  the  name  NAMED. 


5.4.1.21.4  Inserting  an  integer  item  into  a  list 


procedure  insert  (list  :  in  out  listjtype; 

LIST_ITEM :  in  NUMBER; 
POSITION  :  In  COUNT) ; 


procedure  insert  (LIST: 


in  out  LIST  TYPE; 


LIST_ITEM 

NAMED 

POSITION 


in 

in 

in 


NUMBER: 

NAMESTRING; 

COUNT); 


procedure  insert(list:  in  out  list  type; 

LIST_ITEM :  in  NUMbEr; 

NAMED:  in  TOKEN_TYPE; 

POSITION  :  in  COUNT)"; 

Purpose: 

This  procedure  Inserts  an  Integer  Item  Into  a  list  after  the  list  Item  specified  by  POSITION.  A 
value  of  zero  In  POSITION  specifies  a  position  at  the  head  of  the  list. 

Parameters: 

LIST  Is  the  list  Into  which  the  Item  will  be  Inserted. 

LIST__  ITEM  Is  the  value  of  the  Item  to  be  Inserted. 

POSITION  Is  the  position  within  the  list  after  which  the  Item  is  to  be  Inserted. 

NAMED  Is  the  name  of  the  new  Item.  It  may  only  be  used  with  named  or  empty  lists 


Exceptions: 

USE_  ERROR  Is  raised  If  an  attempt  Is  made  to  Insert  a  named  Item  Into  an  unnamed  list  or. 

conversely,  an  attempt  is  made  to  Insert  in  unnamed  Item  Into  a  named  list  or  ir 
LIST  Is  a  named  list  that  already  contains  an  Item  with  the  name  NAMED. 
USE_ ERROR  Is  also  raised  If  POSITION  specifies  a  value  larger  than  the  current 
length  of  the  list. 


5.4.1.21.5  Identifying  an  integer  item  by  value  within  a  Hat 


function  position _by_value  (list  :  in  list_type; 

VALUE:  in  NUMBER; 

»TART_POSITION :  in  POSITION_COUNT 

:=  POSITIDN_COUNT ’FIRST; 
END_POSITION :  ill  POSITION_COUNT 

:=  POS ITI ON_COUNT ’ LAST) 

return  position_count; 

Purpose: 


This  function  returns  the  position  at  which  the  next  Integer  Item  of  the  given  value  Is  located. 
The  search  begins  at  the  START_  POSITION  and  ends  when  either  an  Item  of  value  VALUE  Is 
found,  the  last  Item  of  the  list  has  been  examined,  or  the  Item  at  the  END_ POSITION  has 
been  examined,  whichever  comes  first. 


Parameters: 
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LIST  Is  the  list  In  which  the  poeltlon  of  an  Item  is  to  be  found. 

VALUE  is  the  Integer  item  value. 

START_POSITION 

is  the  position  of  the  first  item  to  be  considered  in  the  search. 

END_  POSITION 

is  the  position  beyond  which  the  search  will  not  proceed;  the  search  may  terminate 
prior  to  reaching  END_POSITION  should  the  sought  Integer  item  be  found  or 
should  the  last  element  of  the  list  be  considered. 

Exceptions: 

USE_ERROR  is  raised  If  START _ POSITION  specifies  a  value  larger  than  the  current  length  of 
the  list.  If  the  list  is  empty  or  If  END  _  POSITION  Is  less  than 
START  _  POSITION. 

SEARCH  _  ERROR 

is  raised  or  the  VALUE  specified  Is  not  found  within  the  region  specified  by 
START _ POSITION  and  END_POSITION. 

5.4.1.22.  Generic  package  FLOAT  ITEM 

This  Is  a  generic  package  for  manipulating  list  Items  which  are  floating  point  numbers.  This  package 
must  be  Instantiated  for  the  appropriate  type  (indicated  by  NUMBER  In  the  specification). 

6.4.1.22.1  Converting  *  floating  point  item  to  its  canonical  external 
representation 


function  TD_TEXT(LIST_ITEM:  in  NUMBER) 
return  STRING; 


Purpose: 

This  function  returns  the  external  representation  of  the  value  of  the  LIST  _  ITEM  parameter. 
The  external  representation  Is  the  string  representation  defined  In  Section  5.4. 

Parameters: 

LIST_ITEM  is  the  floating  point  Item  whose  external  representation  Is  to  be  returned. 


Exceptions: 

None. 


6.4.1.22.2  Extracting  a  floating  point  item  from  a  list 


function  EXTRACT  (LIST :  In  LIST_TYPE; 

POSITION :  In  POSITION_COUNT) 
return  number; 


function  EXTRACT  (LIST: 

NAMED: 
return  NUMBER; 
function  EXTRACT  (LIST: 

NAMES: 
return  number; 


in  LIST_TYPE; 

In  rame'strinc) 

in  USTJYPE; 
in  TOKEN  TYPE) 
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Purpose. 

This  function  locales  a  floating  point  Item  in  a  list  and  returns  a  copy  of  Its  numeric  value. 
Parameters: 

LIST  Is  the  list  containing  the  Item  to  be  extracted. 

POSITION  Is  the  position  within  the  list  that  identifies  the  Item  to  be  extracted. 

NAMED  Is  the  name  of  the  Item  to  be  extracted.  It  may  only  be  used  with  named  lists. 

Exceptions: 

USE_ ERROR  is  raised  If  NAMED  Is  used  with  an  unnamed  list.  If  the  POSITION  specification  or 
the  name  NAMKD  Identifies  an  item  not  of  floating  point  kind.  If  the  list  is  empty 
or  If  POSITION  has  a  value  larger  than  the  current  length  of  the  list. 

SEARCH _ ERROR 

Is  raised  if  there  is  no  item  with  the  name  NAMED. 

CONSTRAINT  _  ERROR 

is  raised  if  the  value  to  be  extracted  violates  the  constraints  of  the  type  designated 
by  NUMBER. 


Exceptions: 

USE  ERROR  is  raised  If  NAMED  Is  used  with  an  unnamed  list.  If  the  POSITION  specification  or 
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the  name  NAMED  Identifies  an  Item  not  of  floating  point  kind.  If  the  list  Is  empty 
or  If  POSITION  has  a  value  larger  than  the  current  length  of  the  list. 

SEARCH  _  ERROR 

Is  raised  If  there  Is  no  Item  with  the  name  NAMED. 


5.4.1.22.4  Inserting  »  floating  point  item  into  *  list 


procedure  insert (list; 

In 

out 

Lirr_TYPE; 

LIST_na : 

in 

NUMBER. 

POSITION : 

in 

comm ; 

procedure  insert  (list  . 

In 

out 

LIST_TTPE : 

LIST_ITEN. 

in 

NUMBER: 

NAMES: 

in 

NAME  STRING; 

POSITION : 

in 

COUNT); 

procedure  insert  (list  : 

In 

out 

LIST  TTPt; 

LIST  ITEM: 

in 

NUMBER; 

NAMED: 

in 

T0NEN_TTPE; 

POSITION: 

in 

COUNT) ; 

Purpose: 

This  procedure  Inserts  a  floating  point  Item  Into  a  list  after  the  list  Item  specified  by 
POSITION.  A  value  of  xero  in  POSITION  specifies  a  postiton  at  the  head  of  the  list. 

Parameters: 

LIST  Is  the  list  Into  which  the  Item  wilt  be  Inserted. 

LIST  _  ITEM  Is  the  value  of  the  Item  to  be  Inserted. 

POSITION  Is  the  position  In  the  list  after  »  hlch  the  Item  Is  to  be  Inserted. 

NAMED  Is  the  name  of  the  new  Item.  It  may  only  be  used  with  named  or  empty  lists. 

Exceptions: 

USE_ERROR  is  raised  If  an  attempt  is  mad'  to  Insert  a  named  Hem  Into  an  unnamed  list  or. 

conversely,  an  attempt  is  madi  to  Insert  an  unnamed  item  into  a  named  list  or  if 
LIST  Is  a  named  list  that  already  contains  an  Item  with  the  name  NAMED. 
USE_  ERROR  Is  also  raised  If  POSITION  specifies  a  value  larger  than  the  current 
length  of  the  list. 


5.4.1.22.5  Identifying  a  floating  point  item  by  value  within  a  lint 


function  POSmon_BY_VAl.UEU.IST: 

VALUE 

START_P0SI  non : 
EMD_P0SITI  JN: 
return  position_count; 


in  LISTTYPE; 
in  number; 
in  position_count; 

:*  POSITION_COUNT ’FIRST; 
in  positior”count; 

:*  P0SITI0N_C0UWT’1  AST) 


Purpose: 


This  function  returns  the  position  at  which  the  next  floating  point  Item  of  the  given  value  Is 
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located.  The  search  begins  at  the  START _ POSITION  and  ends  when  either  an  Item  of  value 
VALUE  Is  found,  the  last  Item  of  the  list  has  been  examined,  or  the  Item  at  the 
END_P0SJT10N  has  been  examined,  whichever  comes  first. 

Parameters: 

LIST  Is  the  list  in  which  the  position  of  an  Item  Is  to  be  found. 

VALUE  Is  the  floating  point  item  value. 

START  _  POSITION 

is  the  position  of  the  first  Item  to  be  considered  In  the  search. 

END  _  POSITION 

Is  the  position  beyond  which  the  search  will  not  proceed:  the  search  may  terminate 
prior  to  reaching  END_POSIT!ON  should  the  sought  floating  point  Item  be  found 
or  should  the  last  element  of  the  list  be  considered. 

Exceptions: 

USE_ERROR  Is  raised  If  START _ POSITION  specifics  a  value  larger  than  the  current  length  of 
the  list,  or  If  END_POSITtON  Is  less  than  START _POSlTlON 

SEARCH  _  ERROR 

Is  raised  the  VALUE  specified  Is  not  found  within  the  region  specified  by 
ST  \RT_ POSITION  and  END_POSITION. 

5.4.1.23.  Package  STRING _ ITEM 

This  is  a  package  for  manipulating  list  Items  Which  are  strings.  The  external  representation  of  the 
value  of  a  string  Item  Is  the  string  returned  by  an  EXTRACT  operation  applied  to  the  string  item 

5.4.1.23.1  Extracting  a  string  item  from  a  list 


function  extract  (list 

in 

LIST  TYPE, 

fOSITIOR 

in 

POSITION_COUNT) 

return  string  ; 

function  extract  (list 

in 

LI  T  TYPE; 

MAKES 

in 

MA  f'sTRING) 

return  string. 

function  extract  (list 

in 

LI..TTYPE; 

MAKES 

in 

TOKEN  TYPE) 

return  mine. 

Purpose 

This  function  locates  a  string  Mem  in  a  list  and  returns  a  copy  of  II 


Parameters 

LIST 


Is  the  list  containing  lh»  Item  to  be  extracted 


POSITION 


Is  the  position  within  the  list  that  Identifies  the  Item  to  be  extracted. 
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NAMED  Is  the  name  of  the  Item  to  be  extracted.  It  may  only  be  used  with  named  lists. 


Exceptions: 

USE  ERROR  Is  raised  If  NAMED  Is  used  with  an  unnamed  list.  If  the  POSITION  specification  or 
the  name  NAMED  Identifies  an  Item  not  of  string  kind,  if  the  list  Is  empty  or  If 
POSITION  has  a  value  larger  than  the  current  length  of  the  list. 

SEARCH _ ERROR 

Is  raised  If  there  Is  no  item  with  the  name  NAMED. 


5.4.1.23.2  Replacing  a  airing  item  in  *  list 


procedure  replace  (list  :  in  out  LIST_type. 

LIST_ITEM:  in  STRING ; 

POSITION:  in  POSITION  COUNT) : 


procedure  replace  (list  : 

LIST  ITEM  . 


NAMED: 


in  out  LiSTjnrPE; 
in  STRING; 

in  MAKE  STRING)  ; 


procedure  replace  (list: 

LIST  ITEM: 


NAMED 


in  out  LIST  TYPE; 
in  STRING; 

in  TOKEN  TYPE) ; 


Purpose: 

This  procedure 

Parameters: 

LIST 

LIST  _  ITEM 

POSITION 

NAMED 


replaces  the  value  of  a  string  Item  In  a  list 

Is  the  list  containing  the  item  to  be  replaced. 

Is  the  new  value  of  the  Item. 

Is  the  position  within  the  list  that  Identifies  the  Item  to  be  replaced. 

Is  the  name  of  the  Item  to  be  replaced.  It  may  only  be  used  with  named  lists 


Exceptions: 

USE_  ERROR  Is  raised  If  NAMED  Is  used  with  an  unnamed  list  or  If  the  POSITION  specification 
or  the  name  NAMED  Identifies  an  Item  not  of  string  kind.  If  the  list  Is  empty  or  if 
POSITION  has  a  value  larger  than  the  current  length  of  the  list. 

SEARCH  _  ERROR 

Is  raised  If  there  Is  no  Item  with  the  name  NAMED. 


6.4.1.23.3  Inserting  a  string  item  into  a  liat 

procedure  insert  (list  :  in  out  list  type; 

LISTITEM:  in  STRING; 
POSITION:  in  COUNT); 

procedure  insert(list:  in  out  list  type. 
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LISTITEN 

in 

STRING . 

NAMED 

in 

NAMESTRING 

POSITION 

in 

COUNT)  ; 

(LIST 

in 

Out  LIST  TTPE. 

LIST  ITEM  : 

in 

STRING. 

NAMED 

in 

TOKEN_TTPE , 

POSITION  . 

in 

COUNT  j”; 

Purpose: 

This  procedure  Inserts  a  string  Item  Into  a  list  after  the  list  Item  specified  by  POSITION.  A 
value  of  zero  In  POSITION  specifies  a  position  at  the  head  of  the  list. 

Parameters: 

LIST  Is  the  list  into  which  the  Item  will  be  Inserted. 

LIST_ITKM  Is  the  value  of  the  Item  to  be  Inserted. 

POSITION  Is  the  position  In  the  list  after  which  the  Item  Is  to  be  Inserted 

NAMED  Is  the  name  of  the  new  item.  It  may  only  be  used  with  named  or  empty  lists. 

Exceptions: 

l.’SK_  ERROR  is  raised  If  an  attempt  Is  made  to  Insert  a  named  Item  Into  an  unnamed  list  or. 

conversely,  an  attempt  Is  made  to  Insert  an  unnamed  Item  Into  a  named  list  or  if 
LIST  Is  a  named  list  that  already  contains  an  item  with  the  name  NAMED. 
I  SK_ ERROR  Is  also  raised  If  POSITION  specifies  a  value  larger  than  the  current 
length  of  the  list 


6.4. 1.23. 4  Identifying  a  string  item  by  value  within  a  list 


function  position  bt  value  (list  in  listttpe, 

VALUE  in  STRING. 

START_POSITION :  in  POSITIONCOUN T 

:  3 POSITION  COUNT  ‘FIRST . 
EXPOSITION  :  in  POSITION_COUNT 

:  = POSITION  COUNT-LAST) 


return  position  count. 


Purpose: 

This  function  returns  the  position  at  which  the  next  string  Item  of  the  given  value  Is  located. 
The  search  begins  at  the  START_POS|TION  and  ends  when  either  an  Item  of  value  VALUE  is 
found,  the  last  Item  of  the  list  has  b»-en  examined,  or  the  Item  at  the  END_  POSITION  has 
been  examined,  whichever  comes  first. 

Parameters: 

LIST  Is  the  list  In  which  the  position  of  an  Item  Is  to  be  found  by  value. 

VALUE  Is  the  string  Item  value. 

START_  POSITION 

Is  the  position  of  the  first  <  m  to  be  considered  In  the  search 


215 


PR0l'0-K,l>  MII^TD-CAIS 
II  JV\I  \R\  IBRS 


KNI)  POSITION 

Is  the  position  beyond  which  the  search  will  not  proceed;  the  search  may  terminate 
prior  to  reaching  END_POSITlON  should  the  sought  string  Item  be  found  or 
should  the  last  element  of  the  list  be  considered. 


Exceptions: 

USE_ ERROR  Is  raised  If  ST ART_  POSITION  specifies  a  value  larger  than  the  current  length  of 
the  list.  If  the  list  Is  empty  or  If  ENT)  _  POSITION  Is  less  than 
START_  POSITION. 

SEA  IIC1!_  ERROR 

Is  raised  If  the  VALUE  specified  is  not  found  >  ithin  the  region  specified  by 
ST.ART  POSITION  and  END  POSITION. 
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TIME_LIMIT :  DURATION  :=  NQ_DELAY) ; 

procedure  SET_CURR£NT_NODE (NODE :  NODE_TYPE)  ; 
procedure  SET_CURRENT_NODE (NAME:  KAME_STRING) ; 
procedure  get_current_node 

(NODE:  in  out  NODE  TYPE; 

INTENT :  INTENTION  :=  (1  =>  EXISTENCE); 

TIME_LINIT  DURATION  : =  NO_DELAY) : 

private 

type  NODE_ITERATOR  is 

(IMPLEMENTATION_DEFINED) ; 

—  sbould  b«  defined  67  lspl«s«ntor 

end  NODE  MANACEMENT; 

package  attributes  is 
Use  NODE_DEFINITIONS ; 
use  LIST_UTILITIES; 

subtype  attribute_name  is  string; 

type  attribute  iterator  is  limited  private; 

subtype  attributepattern  is  string; 

procedure  create_node_  ATTRIBUTE  (NODE:  NODE  TYPE; 

ATTRIBUTE:  ATTR I BUTENAME . 
VALUE:  LISTTYPE) ; 

procedure  CREATE  NODE  ATTRIBUTE  (NAME:  NAMESTRING, 

ATTRIBUTE:  ATTRIBUTENAME : 
VALUE:  LIST_TYPeF ; 

procedure  CREATE  PATH  ATTRIBUTECBASE  NODE_TYPE; 

KEY  RELATIONSHIP_KEY; 

RELATION:  RELATION  NAME  :  = 

DEFAULTRELATION; 
ATTRIBUTE:  ATTRIBUTENAME. 

VALUE  LIST_TYPE)  ; 

procedure  CREATE_PATH_ATTRIBUTE  (NAME :  NAME  STRING. 

ATTRIBUTE:  ATTR  I  BUTE  NAME . 
VALUE:  LIST_TYPeF; 

procedure  delete_node_attr i bute  ( node :  node_type, 

ATTRIBUTE:  ATTR'lBUTE_NAME)  ; 

procedure  delete  node  attributeCname:  name_string; 

ATTRIBUTE:  ATTRIBUTE_NAME) . 

procedure  delete_paTH_attribute(base:  node  typeT 

KEY:  RELATIONSHIP  KEY; 

RELATION:  R£LATION_NAME  :  = 

DEFAULT^RELATTON ; 
ATTRIBUTE:  ATTRIBUTe'naME) , 

procedure  DELETE_PATH_ATTRIBUTE(NAME:  NAME_STRING , 

ATTRIBUTE:  ATTR_IBUTE_NAME)  ; 
procedure  set_node_attribute  (node  .  node_type, 

ATTRIBUTE:  ATTRIBUTE  NAME. 

VALUE:  LIST_TYPE) . 

procedure  set_ncde_attribute  (name  nameJstring. 

ATTRIBUTE:  ATTRIBUTE  NAME; 

VALUE:  LIST_TYPeF ; 

procedure  set  path  attribute (base :  node  type. 

KEY:  RELATIONSHIP  JCEY; 

RELATION:  R£LATION_NAME  := 

DEF  AULT  _RELATI ON ; 
ATTRIBUTE  ATTRIBUTE  NAME; 

VALUE:  LIST_TYPe7. 

procedure  SET_PATH_ATTRIBUTE(NAME:  nameJstring; 

ATTRIBUTE:  ATTRIBUTE  NAME; 
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MODES :  M0PE_TYPE) 

return  boolean; 

function  is_same(namei ;  name_string; 

NAMES:  NAME~STniNG) 

return  boolean: 
procedure  get_parent 
(PARENT: 

NODE: 

INTENT: 

TIME_LIMIT : 

procedure  copy_node 
(FROM: 

TO_BASE: 

T0_KET: 

TO_R£LATION: 

procedure  copy_node  (from 
TO: 

procedure  copy  tree 
(FROM : 

TO_BASE: 

T0_KEY : 

TO_R£LATION: 
procedure  copy  tree  (FROM: 

TO: 

procedure  rename 

(NODE 
NEW  BASE: 

NEW  KEY 
NEW "RELATION : 

procedure  rename  (node: 

NEWNAME: 

procedure  DELETE  NODE  (NODE 
procedure  delete  node  (name 
procedure  deletetree  (node 
procedure  deletetree (name 
procedure  LINK  (NODE: 

NEWBASE: 

NEW  KEY: 

NEW  RELATION : 


in  out  NODE  TYPE: 

NODE  TYPE; 

INTENTION  :=  (L  =>  READ); 
DURATION  :*  NO_DELAY) ; 

NQDE_TYPE ; 

nodejype; 

RELATIONSHIPKEY; 

RELATI ON_NAME  :=  DEFAULT_RELATION) ; 
N0DE_TYPE; 

NAME_STRING) ; 

NODE  TYPE; 

NODE~TYPE ; 

RELATIONSHIP_KEY ; 

RELATI ON_NAME  :=  DEFAULT_RELATION)  ; 
NODE_TYPE ; 
name"  STRING)  : 


NODE_TYPE; 

node'type , 

RELATIONSHIP  JCEY; 

RELATION  NAME  :=  DEFAULTRELATIQN)  ; 
NODE_TYPE ; 

NAME  STRING) ; 
in  out  NODE  TYPE)  ; 

KAMESTRING) : 
in  out  NODEJTYPE)  ; 

NAME  STRING) ; 

Nooi  TYPE; 

NODE" TYPE; 

RELATIONSHIP  JCEY; 

RELATION  NAME  :  =  DEFAULT  RELATION)  ; 


procedure  link  (NODE: 

NEWNAME: 

procedure  unlink  (ease: 

KEY: 


NODE_TYPE ; 
NAMESTRING) ; 
NODE_TYPE. 
RELATIONSHIP  KEY; 


RELATION  .  RELATION_NAME  :=  DEFAULT JIELATION)  ; 
procedure  UNLINK  (NAME:  NAMESTRING)  r 
procedure  iterate 

(ITERATOR: 

NODE: 

KIND: 

KEY: 

RELATION: 

PRIMARYONLY 

procedure  iterate 

(ITERATOR: 

NAME: 

KIND: 

KEY: 

RELATION: 

PRIMARY  ONLY: 

function  mors  (iterator:  node_iterator) 
return  boolean; 
procedure  get_next 

(ITERATOR: 

NEXT  NODE: 

INTENT:  INTENTION  .=  (1  =>  EXISTENCE). 


OUt  NOOE_ITERATOR; 

NODE~  TYPE , 

NODEJCIND; 

RELATI ONSHIP_KEY_PATTERN  :=  *••; 

RELATI ON_NAME_PATTERN  :*  DEFAULT  RELATION: 
BOOLEAN  7=  TRUE); 

OUt  NODE_ITERATOR; 

NAME*  STRING; 

NODEJCIND ; 

RELATIONSHIP_KEY_PATTERN  :»  •••; 

RELATI ON_NAME_PATTERN  :-  DEFAULT  RELATION; 
BOOLEAN  ~=  TRUE) ; 


>n  OUt  NODE_ITERATOR; 
in  out  node  type: 

INTENTfoN  (1  =  > 
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type  TOKEN _TYPE  is  ( IMPLEMENT  AT  ION_DEF  IKED)  ; 

—  should  bs  defined  by  lapleaeetor 

type  LISTJYPE  is  (IRPLEM£NTATIQN_0£FINED)  , 

—  should  be  defined  by  lspleaentor 

ERPTY_LIST  :  constant  LIST_TYPE  :=  (IRPLERENTATIQN_DEFINED)  ; 

—  should  be  defined  by  lapleaentor 

end  LISTJJTILITIES: 
package  ~NODE_HANAGEMEKT  is 
Use  NODE_DEFINITIONS: 
use  LISTJJTILITIES; 

type  node  iterator  is  limited  private: 

subtype  relationship_key_pattern  is  relationship_key; 

subtype  relation_narej»attern  is  RELATION_NARE ; 

procedure  open 

(NODE:  in  out  NODE_TYP£; 

NARE:  NARESTRING; 

INTENT:  INTENTION  :=  (1  =>  READ): 

TIKE_LIKIT :  DURATION  :»  NO_DELAY)  ; 

procedure  OPEN 

(NODE:  in  out  NODE_TYPE. 

BASE:  NODE_rYPE ; 

KEY:  RELATTQNSHIP_KEY ; 

RELATION:  RELATION_NARE  :=  DEE AULTRELATI ON ; 

INTENT:  INTENTION  :*  (1  =>  READ)” 

TIRE_LIRIT:  DURATION  :=  NO_DELAY) ; 

procedure  close(node:  in  out  node_Type)  ; 
procedure  changeintent 

(node”  in  out  mode  type. 

INTENT:  INTe'nTION: 

TIRE_LIRIT:  DURATION  :=  NO_DELAY)  ; 

function  is_open(node  :  NODE  TYPE) 
return  boolean)  . 

function  Intent  of  (NODE :  NODE  TYPE) 
return  intention; 
function  kind  (node  :  node  type) 
return  NODE  KIND; 

function  PRIRARY  NARE  (NODE  :  NODE  TYPE) 
return  harestring; 
function  priraryjcey(node:  node_type) 
return  relationship_key, 
function  PRIKARY_R£LATI0N(N0DE:  node  type) 
return  RELation  nare  : 
function  path_key;node:  node_type) 
return  relationship”key  , 
function  path_relation  (node  ■  ”node_TYpe) 
return  relationjiare; 
function  base_path(nare:  ~kare_strinc) 
return  nare_ string, 

function  LAST_RELaT10N  (NAME :  NAME  STRING) 

return  relationnare; 
function  last  key  (rare  .  name  string) 
return  relationshipjoey, 
function  is_obtainable(node;  ”node_ttpe) 
return  boolean; 

function  isobtainable (name  :  NARESTRING) 
return  BOOLEAN; 

function  IS_OBTAINABLE(BASE:  nodejype. 

KEY:  RELATIONSH!P_KEY; 

RELATION:  RELATIONNARE  =  DEFAULT  RELATION) 

return  boolean; 

function  is  sare(nodei:  node  type: 
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NAMED: 

procedure  replace  (list: 

LIST_ITEM 
NAMED: 

procedure  inserklist: 

LIST_ITEM : 
POSITION: 

procedure  INSERT  (LIST: 

LIST  ITEM: 

NAMED: 

POSITION: 

procedure  insert(LIST: 

LIST_ITEM: 

NAMED: 

POSITION: 

function  position  sr  value 
"(LIST: 

VALUE: 

ST ART_ POSITION 
END  POSITION: 


NAME_STRING) 
in  Out  LIST  TYPE; 
NUMBER: 
TOKEM_TYPE) ; 
in  out  LIST  TYPE; 
NUMBER: 

COinm  ; 

in  out  LIST  TYPE: 
NUMBER: 
NAME_STRING; 
COUNT)  ; 

in  out  LIST  TYPE; 
NUMBER; 

TOKEN  TYPE; 
COUNT)  ; 


return  position  count; 

end  FLOAT_ITEM; 

package  string  item  ia 

function  extract  (list  list  type; 

POSITION:  POSITION  COUNT) 

return  string; 

function  EXTRACT  (LIST :  LIST  TYPE; 

NAMED:  NAME~STRING) 
return  string; 

function  EXTRACT  (LIST:  LIST  TYPE; 

NAMED:  TOKEN  TYPE) 
return  string; 
procedure  REPLACE  (LIST: 

L I  ST  _  ITEM 
POSITION: 

procedure  REPLACE  (LIST: 

LIST  ITEM 
NAMED: 

procedure  replace  (LIST : 

LIST_ITEM 
NAMES: 

procedure  insert  (LIST: 

LIST_ITEM: 

POSITION: 

procedure  insert  (list 

LIST_ITEM: 

NAMED: 

POSITION: 

procedure  insert  (list 

LIST_IT£M : 

NAMED: 

POSITION: 

function  position_by_value 

"(LIST: 

VALUE: 

START  POSITION: 


LIST_TYPE; 

NUMBER; 

POSITION_COUNT 

:=  POSITIQN_COUNT* FIRST. 
POSITION_COUNT~ 

:=  POSITION  COUNT’LAST) 


in  out  LIST  TYPE; 
STRING. 

POSITIONCOUNT) 
in  out  LIST  TYPE; 
STRING; 

NAME  STRING)  ; 
in  out  LIST  TYPE; 
STRING; 
TUKEN_TYPE) ; 
in  out  LIST  TYPE; 
STRING; 

COUNT) ; 

in  out  LIST  TYPE; 
STRING; 
NAMESTRING; 

COUNT) ; 

in  out  LIST  TYPE, 
STRING. 

TOKEN  TYPE, 
COUNT)"; 


end  string 


END_POSITION : 

return  position  count; 

ITEM; 


LIST_TYPE ; 

STRING; 

POSITION_COUNT 

:*  POSITION  COUNT-FIRST, 
POSITION_COUNT 

:*  POSITION  COUNT -LAST) 


private 


JUT 


TJ1B1  lUncuuu 
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- A 

generic 

type  NUMBER  is  range  o 
package  INTEGER_item  is 

function  rojTExraisT  item:  number) 
return  string; 

function  detract (list.  Lisr_rrPE. 

POSITION:  POSITION  COUNT) 
return  number; 

function  detract  (list:  list  type; 

NAMED:  NAME  STRING) 

return  number; 

function  dctract(lisT:  Lm  m. 

NAMED:  token  TTPE) 
return  number. 

procedure  REPlaceclist:  in  out  list  type; 

LISTITEM:  NUMBER ; 

procedure  nepmce  ESt™*  in  out  ' 

tIST_ITEM:  NUMBER. 

procedure  REP^ce  S'  in  out  : 

LIST_nEM:  NUMBER; 

DrnrMi..»  TOKEN  TYPE); 

procedure  insert(list:  jn  out  LIST 

LIST_1TEM;  NUMBER; 

POSITION:  COUNT) ■ 

procedure  INSERT(LIST:  in  out  LIST  TYPE; 

LIST_ ITEM :  NUMBER ; 

*AHED:  NAME  STRING; 

POSITION:  COUNT) 

procedure  INSERTaiST:  i„  out  LISI_TYPE. 

LIST_ITEK:  NUMBER; 

*AJ<ED  TOKEN  TYPE; 

r  ,  POSITION:  COUNT)  ■ 

function  POSITION  BY  VALUE 

~  (LIST: 

VALUE; 

START_POSITION 


EXPOSITION ; 

return  position  count 
end  INTEGER  ITEM; 

generic 

type  number  is  digits  <>; 
package  FLOAT  ITEM  is 

function  to_text(list  item:  number) 
return  string; 


LIST  TYPE; 

NUMBER; 

POSITION_COUNT 

=  POSITION  COUNT ’FIRST 
POSITION_COUNT' 

:=  POSm0N_C0UNT’LAST) 


function  extract  (list: 

POSITION: 
return  number; 
function  extract  (list. 

NAMED: 

return  number; 
function  extractclist; 

NAMED: 
return  number; 
procedure  REPUCE(LIST: 

LIST  ITEM: 
.  POSITION: 

procedure  replace  (list 

LIST_ITEM: 


USTJTYPE; 
POSITION_COUNT) 

LIST  TTPE; 
NAME_STRINC) 

LIST_TYPE; 

TOKEN_TfPE) 


in  out  LIST  TYPE; 
NUMBER; 

POSITION  COUNT)  ■ 
m  out  LIST  TYPE, 
NUMB©; 
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POSITION:  POSITION  COUNT) 
return  positive; 

function  text_length(hst ;  list  ttpe; 

NAMED:  NAMESTRING) 

return  positive; 

function  texi_length(list:  list  ttpe. 

NAMED :  TOKEn”tYPE) 
return  positive; 

package  identifier_item  is 

procedure  to  token  (identifier:  name_string; 

TOKEN:  Out  TOKEN  TYPE) ; 

function  TO_TEXT(LIST_ITEM:  token  TYPE) 
return  name  string; 

function  IS_ESUAL (TOKEN 1 :  TOKEN  TYPE; 

TOKENS :  TOKEN~TYPE) 
return  boolean; 


procedure  extract  (list  :  list  type; 

POSITION:  POSITIONCOUNT; 

TOKEN :  Out  TOKEN  TYPE)  ; 

procedure  extract  (list:  list  type; 

NAMED:  '  NAME~STRING ; 

TOKEN :  out  TOKEN  TYPE)  ; 

procedure  EXTRACT  (LIST :  LISTTYPE; 

NAMED:  TOKEN_TYPE; 

TOKEN:  Out  TOKEN JTYPE)  ; 

procedure  replace (LIST .  in  out  LIST  TYPE; 

LIST_ITEM:  TOKEN  TYPE; 

POSITION:  POSITION_COUNT) ; 

procedure  replace  (LIST:  in  out  list  type; 

LISTITEM:  TOKENTYPE; 

NAMED:  NAMESTRINC); 

procedure  replace  (list :  in  out  list  type; 

LIST_ITEM:  TOKEN_TYPE . 

NAMED :  TOKEN~TYPE)  ; 

procedure  INSERT  (LIST :  in  out  LIST  TYPE; 

LI ST_ ITEM :  TOKEN_TYPE ; 

POSITION:  COUNT); 

procedure  insert(list:  in  out  list  type; 

LIST_ITEM :  TOKEN  TYPE ; 

NAMED:  NAME  STRING; 

POSITION:  COUNT); 

procedure  insert  (LIST:  in  out  list  type; 

LIST_ITEM:  TOKEN  TYPE; 

NAMED:  TOKEn’tYPE; 

POSITION:  COUNT)”; 

function  POSITION_BY_VALUE(LIST:  LIST  TYPE; 

VALUE:  TOKEN  TYPE; 

START_POSITION:  POSITION_COUNT 

:  =  POSITION  COUNT "FIRST ; 
END_POSITION:  POSITION_COUNT_ 

:=  POSITION  COUNT "LAST) 


return  position  count; 
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procedure  insert  (list 

LIST  ITEM 

NAMED: 

POSITION 


in  OUt  l IST_TYPE; 
LIST”tyPE; 
TOKEN  TYPE; 
COUNT)  ; 


function  POSITION_tY_VALUE(LlST: 

VALUE  : 

NTARTPOSITION. 

END_POSITION: 

return  position  count; 


listjype; 

LIST* TYPE; 

POSITION_COUNT 

:  =  PoilTIONCOUNI  'FIRST 
POSITION  COUNT” 

:=  POSITION  COUNT 'LAST) 


function  set_extract(list  : 

POSITION: 


LENGTH: 

return  list  text; 


LISTJYPE. 

POSIT! ON_COUNT ; 

POSITIVE” :=  POSITIVE ’LAST) 


procedure  splice  (list  . 

POSITION: 
SUB_LIST : 

procedure  splice  (list  : 

POSITION: 
SUB  LIST: 


in  out  LIST_TYPE ; 

POSITION  COUNT; 
LISTJEXT) ; 
in  out  LISTJYPE; 

POSITION  COUNT; 
LIST  TYPE) ; 


procedure  delete  (list: 

POSITION: 

procedure  delete  (list: 

NAMED: 

procedure  delete  (LIST: 

NAMED: 

function  GET  LIST  KIND  (LIST 


in  out  LIST  TYPE; 

POSITION  COUNT)  ; 

in  out  listjype; 

name"string) ; 
in  out  listjype; 

TOKEN  TYPE) ; 

:  LIST  TYPE) 


return  list  kind; 


function  GET  ITEM  KIND  (LIST .  LIST  TYPE; 

POSITION:  P0SITI0NCOUNT) 
return  itemkind; 

function  GET  JTEMKIND  (LIST:  LISTJYPE; 

NAMED.  NAMESTRING) 

return  item  kind; 

function  get  jtemkind  (list:  listttpe; 

NAMED :  TOKENTYPE) 

return  item  kind; 

procedure  MERGE  (FRONT:  LIST_TYPE ; 


BACK:  LIST  TYPE; 

RESULT:  in  out  LIST  TYPE)  ; 
function  length  (list:  list_type)  return  count; 
procedure  item  name(list:  ”  list_type; 

POSITION:  POSITION_COUNT; 

NAME:  OUt  TOKEN  TYPE) ; 

function  POSITION_BY_NAME (LIST :  LISTJYPE; 

NAMED:  NAME” STRING) 
return  position  count; 
function  position  by  name  (list,  list  type; 

NAMED:  TOKEN  TYPE) 


return  POSITION  COUNT; 


function  text_length(list:  list  type) 
return  NATURAL; 

function  text  length  (list:  list  type; 
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LOCKERROR: 
ACCESSJIOLATION : 

iirrorr~viOLATio« : 
SECURITY  VIOLATION : 


exception ; 
exception; 
exception ; 
exception ; 


private 

type  node  type  ie 

(IMPLEMENT ATI0N_DEF I NED) ; 

—  ■bools  b«  daflnad  by  leplntotor 
end  NODE  DEFINITIONS; 


package  listjutlities  is 

use  NODE_DEFINITTON8 ; 
type  listjype  ia  limited  private; 
type  TOKEN  TYPE  ia  limited  private; 
type  listJcind  ia  (unnamed,  named,  empty); 
type  itemjcind  ia 

Clist" item.  string  item. 

INTEGERJTEM,  FLOAT _ITEM.  IDENTIFIER_ITEM) ; 

type  count  ia  range  o  ..  integer' last; 
aubtype  listjext  ia  string; 

aubtype  positio«_count  ia  count  range  count’FIRST  ♦  i  ..  count-last; 

emptylist:  conatant  list  type; 

searcherror  :  exception; 

constrainterror  .  exception; 

procedure  COPY  (TO  LIST;  out  LISTTYPE; 

FROM  LIST;  LIST  TYPE) ; 


procedure  T0_LIST(UST_STRING:  string; 

LIST:  OUt  LIST_TYPE)  ; 

function  TO  JEXT(LISTJTEM:  LIST  TYPE) 
return  listtbct; 

function  ISEIJUAL  (LISTl :  LIST_TYPE ; 

LISTS:  LISTJYPE) 
return  BOOLEAN; 


procedure 

procedure 

procedure 

procedure 

procedure 

procedure 

procedure 

procedure 


EXTRACT (LIST: 

POSITION: 
LIST_ITEM: 
EXTRACT  (LIST* 
NAMED: 

LIST  ITEM: 


LIST  TYPE; 
POSITION  COUNT; 
out  LISTJYPE) ; 
LISTJYPE; 

NAME-  STRING; 
out  LIST  "type); 


EXTRACT (LIST:  LIST  TYPE; 

NAMED:  TOKEN  JYPE; 

LIST  ITEM:  Out  UST  JYPE) ; 
REPLACE (LIST T  in  OUt  LISTJYPE; 

LIST  ITEM:  LISTJYPE; 

POSITION:  POSITION  COUNT) ; 

REPLACE  (LIST:  in  OUt  LISTJYPE; 

LIST  ITEM:  LISTTYPE; 


NAMED :  NAMESTRING) ; 

REPLACE  (LIST:  in  out  LIST~ TYPE; 


LIST  ITEM:  LISTJYPE; 

NAMED:  TOKEN  TYPE): 

INSERT  (LIST:  in  OUt  LIST  TYPE; 


LIST  ITEM: 
POSITION: 
INSERT (LIST: 

LIST  ITEM: 
NAMED: 


LISTJYPE; 
COUNT) ; 

in  out  LISTJYPE; 
LISTJYPE; 
NAMESTRING, 


POSITION: 


COUNT); 


223 


PROPOSED  MIL-STD-OAIS 
31  JaM'ABV  iora 


Appendix  B 
CAIS  Specification 

This  appendix  contains  a  set  of  Ada  package  specifications  of  the  CAIS  Interfaces  which 
compiles  correctly.  It  brings  together  the  Interfaces  found  in  Section  5  using  the  Nested  Generic 
Subpackages  Implementation  approach.  Although  the  interfaces  are  not  necessarily  shown  here 
in  the  order  in  which  they  are  discussed  In  the  text,  this  appendix  provides  a  reference  listing  of 
the  CAIS  as  well  as  an  illustration  of  the  generics  approach. 


with  CALENDAR; 

Use  CALENDAR; 
package  cais  is 

package  node_d£FINitions  is 

type  node_type  is  limited  private; 
type  node  "kind  is  (file,  structural,  process); 
type  INTENT  SPECIFICATION  is 
(EXISTENCE. 

READ. 

•RITE. 

READATTRIBUTES , 

WRITEATTRIBUTES , 

APPENDATTR I BUTES . 

READ  RELATIONSHIPS . 

WRITE_R£LATIONSHIPS . 

APPENDRELATIONSHIPS . 

READCONTENIS . 

•RITECONTENTS. 

APPENDCONTENTS, 

CONTROL. 

EXECUTE. 

EXCLUSIVEREAD. 

EXCLUSIVEWRITE. 

EXCLUSIVE_READ_ATTRIBUTES . 

EXCLUSIVE  jnilTEATTRianES. 

EXCT.US  IVEAPPENDATTR I BUTES . 

EXCLUSIVE READ  JIELATIONSHIPS . 
EXCLUSrVE~fRITE_RELATIONSHIPS , 
EXCLUSrVE~APPEND_RELATIQNSHIPS . 
exclusive”read_contents . 

EXCLUSIVE~WRITE_CONTENTS . 

DCCLUS IVE~APPEND_CO  NTENTS . 

EXCLUSIVE  CONTROL) ; 

type  intention  Is  array  (positive  range  <>) 

Of  INTENT_SP£CIFICATION; 

subtype  namestring  is  string; 

subtype  relationship_ket  is  string; 

subtype  RELation_xan£  is  string; 

subtype  form  string  is  string; 


CURRENT_USER : 
CURRENT_NODE : 
CURR£NT~PROCESS : 
LATEST_KEY: 
DEFAULT _R£LATI ON : 
NO  DELAY: 


=  * • CURRENT_USER* ; 
*  • ' CURRENT~NGDE * ; 


constant  namestring 
constant  name  "string 
constant  naxe^string 
constant  relationship_key  =  •#•; 
constant  relation_nam£  .*  "dot*; 
constant  duration":  =  duration ’first; 


NAMEERROR: 
USE_ERROR: 
STATUS  ERROR: 


exception 

exception 

exception 
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applies  to  process  nodes;  designates  the  classification  of  the  node's  process  as  a 
subject;  values  ar  Implementation-defined. 

TERMINAL_KIND: 

applies  to  file  nodes  with  a  FILE_KIND  attribute  value  of  TERMINAL;  designates 
the  kind  of  terminal  which  Is  represented  by  the  node's  contents;  possible  values  are 
SCROLL,  PAGE  and  FORM. 


Predefined  Attribute  Values: 

ABORTED 

APPEND 

APPEND  _  ATTRIBUTES 

APPEND  _  CONTENTS 

APPEND_  RELATIONSHIPS 

CONTROL 

COPY 

DIRECT 

EXECUTE 

EXISTENCE 

FILE 

FORM 

MAG  NETIC_  TAPE 

MIMIC 

PAGE 

PROCESS 

QUEUE 

READ 

READ  _  ATTRIBUTES 
READ  _  CONTENTS 
READ  _  RELATIONSHIPS 
READY 
SCROLL 

SECONDARY_ STORAGE 

SEQUENTIAL 

SOLO 

STRUCTURAL 

SUSPENDED 

TERMINAL 

TERMINATED 

TEXT 

WRITE 

WRITE  _  ATTRIBUTES 
WRITE  _  CONTENTS 
WRITE  REIATIONSIIIPS 
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FINISH_  TIME: 

applies  lo  process  nodes;  designates  the  Implementation-defined  time  at  which  the 
process  terminated  or  aborted. 

GRANT:  applies  to  relationships  of  the  predefined  relation  ACCESS;  designates  the  access 

rights  which  can  be  granted  via  the  access  relationship;  values  are  lists  of  relevant 
grant  Items  as  specified  In  TABLE  II. 

HANDLES  _  OPEN: 

applies  to  process  nodes;  designates  the  number  of  node  handles  the  node's  process 
currently  has  opened. 

HIGHEST  _  CLASSIFICATION: 

applies  to  file  nodes;  designates  the  highest  allowable  object  classification  label  that 
may  be  assigned  to  the  node;  values  are  Implementation-defined. 

IO_UNlTS:  applies  to  process  nodes:  designates  the  number  of  GET  and  PUT  operations  that 

have  been  performed  by  the  node's  process. 

KIND:  applies  to  all  relationships;  designates  the  kind  of  the  target  node;  possible  values 

are  STRUCTURAL.  PROCESS  and  FILE. 

LOWEST  _  CLASSIFICATION: 

applies  to  file  nodes;  designates  the  lowest  allowable  object  classification  label  that 
may  be  assigned  to  the  node;  values  are  Implementation-defined. 


MACIIINE_TIME: 

applies  to  process  nodes;  designates  the  length  of  time  the  process  was  active  on  the 
logical  processor.  If  the  process  has  terminated  or  aborted,  or  zero,  if  the  process  has 
not  terminated  or  aborted. 

OBJECT  _  CLASSIFICATION: 

applies  to  all  nodes;  designates  the  node’s  classification  as  an  object;  values  are 
implementation-defined. 

PARAMETERS: 

applies  to  process  nodes;  designates  the  parameters  with  which  the  process  was 
initiated. 

QUEUE  _  KIND: 

applies  to  file  nodes  with  a  FILE_KIND  attribute  value  of  QUI  UE;  designates  the 
kind  of  queue  file;  possible  values  are  SOLO,  MIMIC  and  COPY. 

RESULTS:  applies  to  process  nodes;  designates  the  Intermediate  results  of  the  process;  values 

are  user-defined. 

START_TIME: 

applies  to  process  nodes;  designates  the  Implementation-defined  ime  of  activation  of 
the  process. 

SUBJECT  CLASSIFICATION: 


220 


PROPOSED  MII/-sTD-<  \l- 
31  JAM  AR'l  IBS.'. 

representing  a  device  to  which  the  process  has  access.  Also  designates  a  primary 
relationship  from  the  system-level  node  to  a  node  representing  a  device. 

DOT:  designates  the  default  relation  name  to  be  used  when  none  is  provided.  Special 

rules  apply  for  pathname  abbreviations  In  the  presence  <>r  path  elements  whose 
relation  name  Is  DOT.  No  other  semantics  are  associated  with  DOT. 

JOB:  designates  a  primary  relationship  from  the  top-level  node  of  a  user  to  the  root 

process  node  of  a  Job. 

PARENT:  designates  the  secondary  relationship  from  a  given  node  to  the  node  which  Is  the 

source  of  the  unique  primary  relationship  pointing  to  the  given  node. 

PERMANENT_  MEMBER: 

designates  a  primary  relationship  from  a  node  representing  a  group  to  the  node 
representing  a  permanent  member  of  the  group. 

POTENTIAL  _  MEMBER: 

designates  a  secondary  relationship  from  a  node  representing  a  group  to  the  node 
representing  a  potential  member  or  the  group. 

STANDARD  _  ERROR: 

designates  the  secondary  relationship  from  a  process  node  to  a  file  node  representing 
the  standard  device  for  error  messages  for  the  whole  job. 

STANDARD  _  INPUT: 

designates  the  secondary  relationship  from  a  process  node  to  a  file  representing  the 
standard  input  device  for  the  whole  Job. 

STANDARD  _  OUTPUT: 

designates  the  secondary  relationship  from  a  process  node  to  a  file  node  representing 
the  standard  output  device  for  the  whole  Job. 

USER:  designates  a  secondary  relationship  from  a  process  node  to  a  user's  top-level  node. 

Also  designates  a  primary  relationship  from  the  system-level  node  to  a  top-level 
node  representing  a  user. 

Predefined  Attributes: 

ACCESS  _  METHOD: 

applies  to  file  nodes;  designates  the  kind  of  access  which  can  be  used  on  the  node's 
contents;  possible  values  are  SEQUENTIAL,  DIRECT  and  TEXT. 

CURRENT  _  STATUS; 

applies  to  process  nodes;  designates  the  current  status  of  the  node's  contents; 
possible  values  are  READY,  SUSPENDED,  ABORTED  and  TERMINATED. 

F!LE_K!ND:  applies  to  file  nodes;  designates  the  kind  of  file  that  Is  the  n^c  *  contents;  possible 
values  are  SECONDARY  _  STORAGE.  QUEUE,  TERMINAL  and 
MAGNETIC  TAPE. 
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Appendix  A 

PREDEFINED  RELATIONS,  ATTRIBUTES  AND 
ATTRIBUTE  VALUES 

Predefined  Relations: 

ACCESS:  designates  a  secondary  relationship  from  an  object  node  to  a  node  representing  a 

role;  the  access  rights  that  can  be  granted  to  adopters  of  the  role  are  given  In  the 
GRANT  attribute  of  this  relationship. 

ADOPTED  _  ROLE: 

designates  a  secondary  relationship  from  a  subject  (process)  node  to  a  node 
representing  a  role:  Indicates  that  the  process  has  adopted  the  role  represented  by 
the  node. 

ALLOW  _  ACCESS. 

designates  a  secondary  relationship  from  a  process  node  to  a  node  representing  a 
role;  Indicates  that  the  process  can  create  relationships  of  the  predefined  relation 
ACCESS  from  an  object  to  this  node  representing  the  role. 

COUPLE:  designates  a  secondary  relationship  from  a  node  representing  a  queue  file  to  the 

node  representing  that  file's  coupled  file;  indicates  that  the  queue  file  and  the  other 
file  are  coupled;  for  copy  queue  files,  this  means  the  contents  of  the  file  are  the 
Initial  contents  of  the  queue  file;  for  mimic  queue  files,  this  means  that  the  contents 
of  the  file  are  the  initial  contents  of  the  queue  file  and  subsequent  writes  to  the 
queue  file  are  appended  to  the  other  file  as  well. 

CURRENT  _  ERROR: 

designates  a  secondary  relationship  from  a  process  node  to  a  file  node  representing 
the  file  to  which  error  messages  are  to  be  written. 

CURRENT_  INPUT: 

designates  a  secondary  relationship  from  a  process  node  to  a  file  node  representing 
the  file  which  Is  currently  the  source  of  process  inputs. 

CURRENT  _  JOB: 

designates  a  secondary  relationship  from  a  process  node  to  the  root  process  node  of 
the  tree  which  contains  the  process  node. 

CURRENT  _  NODE: 

designates  a  secondary  relationship  from  a  process  node  to  the  node  representing 
the  current  focus  of  attention  or  context  for  the  process'  activities. 

CURR  ENT  _  OUTPUT: 

designates  a  secondary  relationship  from  a  process  node  to  a  file  ni>de  representing 
the  file  to  which  outputs  are  currently  being  directed. 

CURRENT  _  USER: 

designates  a  secondary  relationship  from  a  process  node  to  a  lop-level  node 
representing  the  user  on  whose  behalf  the  process  was  Initiated. 

DEVICE:  designates  a  secondary  relationship  from  a  process  node  to  a  top-level  node 
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6.  NOTES 

8.1.  Keywords 

The  following  list  represents  the  keywords  applicable  to  this  standard.  These  keywords  may  be  used 
to  categorize  the  concepts  present. ’d  within  this  standard  and  assist  In  automatic  retrieval  of 
appropriate  data  used  in  automated  document  retrieval  systems. 

Ada 

APSE 

CATS 

Coocn  APSE  Interface  Sat 
computer  flla  systea 
KAPSE 

high  taral  languages 
Inter facaa 
Interoperability 
operating  systea 
portability 

programing  support  envlronnent 
software  engineering  envlroreent 
transportability 
virtual  operating  systea 
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VALUE: 

procedure  get  node  attribute  (node: 

ATTRIBUTE: 
VALUE: 

procedure  get_node_attribute (name : 

ATTRIBUTE: 
VALUE. 

procedure  get_path  attribute  (base  : 

KEY: 

RELATION: 

ATTRIBUTE: 
VALUE: 

procedure  GET  PATH  ATTRIBUTE  (NAME : 

ATTRIBUTE : 
VALUE: 

procedure  NODE_ATTRIBUTE_ ITERATE  (ITERATOR: 

NODE : 
PATTERN. 

procedure  NODE_ATTRIBUTE_ITERATE (ITERATOR: 

NAME : 
PATTERN: 

procedure  PATH  JtmiBUTE_ITERATE  (ITERATOR: 

BASE: 

KEY: 

RELATION : 


LIST  TYPE) ; 

NODE_TYPE; 
ATTRIBUTE_NAME; 
in  OUt  LISTJYPE)” 

NA«f  STRING ; 

attrIbute_name ; 
in  out  LIST_TYPE) ; 
node”  TYPE : 
RELATIONSHIP_KEY, 
RELATI  0N_NAMi  :  = 

DEFAULTJIELATION; 
ATTRIBUTE_KAME; 
in  out  LIST_TYPE) : 

name”  STRING ; 

ATTRIBUTE  NAME; 
in  out  LIST  TYPE)” 

OUt  ATTRIBUTE  ITEHATOR; 
NODETYPE; 

attribute  pattern  := 

out  ATTR I BUTE_1  TERATOR ; 
NJU«E_STRING ; 
AnRIBUTE_PATTERN  :  = 
OUt  ATTRIBUTE  ^ITERATOR ; 
NODE_TYPE : 
RELATIONSHIP  KEY; 
RELATIONNAME  := 

DEFAULT  RELATION; 
ATTRIBUTE  PATTERN  :  = 
out  ATIRIBUrE  ITERATOR; 
NAME  STRING; 

ATTRIBUTE  PATTERN 


PATTERN : 

procedure  PATH  ATTR  I  BUTE_  ITERATE  ( ITERATOR 

NAME: 

PATTERN. 

function  MORE  (ITERATOR:  ATTRIBUTE^  ITERATOR) 

return  boolean; 

procedure  GET_NEXT( ITERATOR:  in  out  ATTR IBUTE_ ITERATOR 

ATTRIBUTE:  out  ATTRIBUTE  NAME . 

VALUE:  in  OUt  LIST  TYPE)". 

private 

type  ATTRIBUTE_ITERATOR  ia  (lKPU.»ENTATION_DEFINED)  ; 

—  ihouia  t>«  d«fln«d  ’By  lapl«a«ntor 

end  ATTRIBUTES; 

package  access_control  ia 
uae  N0DE_DEFINITI0NS; 

aubtype  GRANT _value  w  CAIS  LISTUnUTlES  L1ST_TYPE ; 


NODE_TYPE; 
node”  TYPE ; 
GRANT_ VALUE) ; 
NAME_STRING , 
NAME”  STRING; 
GRANT_ VALUE) . 
NODE  TYPE.” 

NAME” STRING) 


procedure  set_access_control(node 

ROLE^NODE : 

GRANT: 

procedure  set_access_control  (name  : 

ROLENAME : 

GRANT: 

function  IS_GRANTED(08JECT_NODE: 

ACCESS* RIGHT 
return  boolean; 

function  IS_GRANTED(OBJECT_NAME:  NAME_STRING; 

ACCESS” R IGHT :  NAME”sTRING) 
return  boolean; 
procedure  adopt  (Role_node  : 

role”  KEY: 

procedure  unadopt crole_k£Y 
end  access_control  , 

package  structural _nodes  ia 

uae  NODE  DEFINITIONS; 


NODEJTPE; 
RELATIONSHIP_KEY  .= 
RELATIONSHIP  KEY) ; 


UTEST  KEY); 
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use  LIST_UTILITIES; 

procedure  create_node 
(node” 

BASE: 

KEY: 

RELATION: 
ATTRIBUTES: 
ACCESS_CONTROL : 
LEVEL:” 

procedure  create_node 
(node” 

NAME: 

ATTRIBUTES: 
ACCESS  CONTROL: 
LEVEL.” 

procedure  CREATE  NODE 

(base” 

KEY: 

RELATION : 
ATTRIBUTES: 
ACCESS_CONTROL : 
LEVEL: 

procedure  create_node 
(hake" 

ATTRIBUTES: 

ACCESSCONTROL: 

LEVEL: 

end  STRUCTURAL  NODES ; 

package  processdefinitions  ia 
uae  NODE  DEFINITIONS; 

uae  list”utilities; 


in  out  NODE  TYPE; 

NODE”_TYPE; 

RELATIQNSHIP_KEY  :=  LATESTKEY; 
RELATION_NAmE  :  =  DEFAULT_RELATION ; 
LIST_TYPE  :=  EMPTY_LIST;“ 

list”type  :=  ekpty“list: 

LISr“TYPE  : =  EMPTy'lIST) ; 

in  out  NODE_TYPE ; 

1AME_STRING ; 

LIST”TYPE  :=  EMPTY_LIST; 

LISt”tYPE  :»  EMPTY”LIST; 

LIST_TYPE  :=  EMPTy”lIST) . 

NODE_TYPE ; 

RELATIONSHIP  KEY  :=  LATESTKEY; 
RELATT  ON_KAME  :»  DEF AULT_RELATI ON ; 
LIST_TYPE  :=  EMPTY_LIST; ” 
LIST~TYPE  :=  EMPTy”lIST; 

LIST”TYPE  : =  EMPTy'lIST) ; 

NAMESTRING ; 

LIST  TYPE  :=  EMPTY  LIST; 

LISr“TYPE  :=  EMPTY^LIST ; 

LISTJTYPE  :  =  EMPTY^LIST)  ; 


type  PROCESSSTATUS  is 

(READY.”  SUSPENDED.  ABORTED.  TERMINATED); 

subtype  R£SULTS_LIST  is  CAIS  LIST  UTILITIES.LIST  TYPE; 

subtype  results'string  is  STRING; 

subtype  parameterlist  is  cais  .  list_utilittes  .  list_type . 

root  process  :  constant  name  string  =  •  current  job*; 

CURRfENT_INPUT:  constant  NAMe”sTRING  :=  ■  CURRENTINPUT* ; 

CURRENT_OUTPUT :  constant  NAME  STRINC  :=  *  • CURRENT_OUTPUT" 
CURRENT  ERROR :  constant  NAME”sTRING  :=  • * CURRENTERROR * ; 

end  PROCESS_DEFINITIONS; 

package  process_control  is 
use  NODE_DEFINITIONS; 

use  list”utilities; 

use  PROCESS  DEFINITIONS; 


procedure  spawn  process 

(NODE: 

FILE_NODE : 
INPUT_PARAMETERS : 
KEY: 

RELATION : 
ACCESS_CONTROL : 
LEVEL:” 
ATTRIBUTES: 


in  out  NODE  TYPE; 

NODE_TYPE; 

PARAMETER_LIST  =  EMPTY  LIST; 
RELATIONSHIP_KEY  :=  LATEST  KEY; 
RELATIOM_NAME  :=  DEFAULT  RELATION; 
LISTJTYPE  :=  EMPTY  LIST;” 
LIST”tTPE  =  EMPTY”lIST ; 

LIST "TYPE  = 
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EMPTY_LIST; 

NAMESTRING 

NAME'STRING 

NAME_STRING 

NAME'sTRING 


INPUT_FILE : 

OUTPUT  FILE: 

ERROR_FILE: 

ENYIRONMENT_NODE : 
procedure  await  process  'completion 

(NODE:  "  N0DE_TYPE; 

TIMELIMIT:  DURATION  :  =  DURATION ’LAST) ; 

procedure  await_process_completion 

(NODE:  -  NODE_TYPE; 

RESULTS_RETURNED :  in  Out  RESULTS_LIST; 

STATUS :” 

TIME_LIMIT: 
procedure  invoke_process 
(NODE~ 

FILE_N0DE : 

RESULTS  _RETURNED : 

STATUS: 

INPUT  PARAMETERS: 

KEY: 

RELATION : 

ACCESS  CONTROL: 

LEVEL:" 

ATTRIBUTES: 

INPUT _FILE: 

OUTPUT _FILE : 

ERROR _FILE: 

ENVIRONMENT  NODE: 

TIME_LIMIT:~ 
procedure  create  job 
(FILE"  NODE: 

INPUT  PARAMETERS: 

KEY: 


=  CURRENT_I NPUT ; 

=  CURRENTJJUTPUT; 
*  CURRENT-ERROR ; 

=  CURRENT  NODE) ; 


OUt  PROCESS_STATUS ; 

DURATION  :=  DURATION 'LAST)  ; 

in  out  NODE  TYPE : 

NODEJTYPE; 

in  out  RESULTSLIST; 

OUt  PROCESS  STATUS; 

PARAMETERLIST: 

RELATIONSHIPKEY  :=  LATESTKEY; 
RELATION  NAME  :=  DEFAULT  RELATION; 


LIST  TYPE 

LISTJTYPE 

LISTJTYPE 

NAMESTRING 

NAME~ STRING 

NAMESTRING 

NAME  STRING 


EMPTY_LIST; 

EMPTYJ.IST; 

EMPTY-LIST; 

=  CURRENTIHPUT. 

=  CURRENT- OUTPUT ; 
s  CURRENT_ERROR ; 

=  CURRENT  NODE : 


DURATION  :*  DURATION' LAST) . 


NODE_TYPE ; 

PARAMETERLIST  ;=  EMPTYLIST; 
RELATIONSHIP  KEY  :*  LATEST  KEY; 


ACCESS  CONTROL:  LIST_TYPE 

LEVEL:”  LIST~TYPE 

ATTRIBUTES :  LIST  TYPE 

INPUTFILE:  NAME  STRING 

OUTPUT_FILE :  NAMESTRING 

ERROR_FILE:  NAMe'sTRING 

ENVIRONMENTNODE:  NAMESTRING 

procedure  APPEND  RESULTS (RESULTS:  RESULTSSTRING)  ; 
procedure  WRITE  RESULTS (RESULTS:  RESULTS  STRING); 


EMPTY_LIST; 

EMPTY- LIST ; 
EMPTT-LIST; 

=  CURR£NT_INPUT; 

=  CURRENT_OUTPUT; 
=  CURRENT_ ERROR; 

=  CURRENT  USER) ; 


procedure  GET_RESULTS  (NODS : 

RESULTS: 

procedure  get_results  (node  : 

RESULTS: 

STATUS: 

procedure  get_results(name: 

RESULTS: 

STATUS: 

procedure  get_results  (name : 

RESULTS: 


NODE  TYPE; 

in  OUt  RESULTS  LIST)  ; 
NODE_TYPE ; 

in  OUt  RESULTS_LIST ; 
out  PROCESS- STATUS )  ; 
NAMESTRING; 
in  out  RESULTS  LIST; 
out  PROCESS'STATUS)  ; 
NAMESTRING; 
in  OUt  RESULTS  LIST)  ; 


procedure  get_parameters  (parameters  ;  in  out  parameterlist)  ; 
procedure  abcrt_process ( node :  node_type ; 

RESULTS :  RESULTS_STRING) ; 
procedure  abort  process  (name  :  kame  string; 

RESULTS:  RESULTS_STRING) ; 

proced  u  re  abort  process  (  node  ;  node  jtype)  ~ 
procedure  abort'process (name:  name'string)  ; 
procedure  suspend_process (node :  node  jtype)  ; 
procedure  SUSPEND^PROCESS  (NAME:  name 'string)  ; 
procedure  resume_process(node;  node_type>  ; 
procedure  resume-process (name:  name "string)  . 

Function  status  of  process  (node:  node  type) 
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return  process_status ; 

function  status_of_process (name  name_string) 
return  processstatus  ; 
function  HANDLES_OPEN  (MODE :  MODE_TYPE) 
return  natural, 

function  HANDLESJJPEN(NAME:  NAMESTRING) 
return  NATURAL; 

function  io  umits  (node  :  node_type) 
return  natural, 

function  io_units(name.-  name_string) 
return  NATURAL; 

function  START  JTKE  (NODE :  NODEJYPE) 
return  tinE; 

function  start  jt  me  (Name:  name_string) 
return  TIME; 

function  finish  jtme  (node:  nodejype) 
return  TIME: 

function  finish  jtme  (name:  namestring) 
return  TIME; 

function  machine  jtime  (node  ;  node_type) 
return  duration; 

function  machine  jtme  (name:  name  strinc) 
return  duration; 

end  processcontrol  ; 

package  io  definittqns  is 

use  NODEDEFINITIONS; 
use  LIST_UTILITIES ; 

type  file  ttpe  is  limited  private; 
type  FILE**N0DE  is 

(IN  fIle.  inout_file.  out  file. 

APPENDFILE) ; 

type  characthiarrat  is  array  (character)  of  boolean; 
type  FUNCTION_icEY_DESCRIPTOR  (LENGTH:  POSITIVE)  is  private; 
type  TAB  ENUMERATION  is  (HORIZONTAL.  VERTICAL) ; 
type  POSITION  TYPE  is 
record 

ROW :  NATURAL ; 

COLUMN:  NATURAL; 

end  record; 

private 

type  FILEJYPE  is  ( IMPLEMENT ATI ON_DEFINED)  ; 

—  sBonld  b«  dsflnsd  by  lspl«s«ntor 
type  FUNCTION_KEY_DESCRIPTOR  (LINK :  POSITIVE)  is 
record 

null:  —  dsfinsd  by  lspiasantor 
end  record; 


end  10  DEFINITIONS; 


package  io  control  is 

use  I0_DEFINITI0NS; 
use  NODE_D£FINITIONS 
use  LIST  UTILITIES; 


procedure  open  file  node 

(FILE: 

NODE: 

INTENT:  in 

TIME_LIMIT:  in 
procedure  synchronize  (FILE: 


FILEJYPE; 
in  out  NODEJYPE ; 

INTENTION; 

DURATION  :s  NO  j)ELAY)  ; 
FILE  TYPE); 
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procedure  set_log(file:  file_type; 

LOG_FILE :  file" TYPE) ; 
procedure  CLEAR_LOC(FfLE:  FILE_TYPE)  : 
function  loccingIfile:  file_type) 
return  boolean; 

function  get_log(file:  file_type) 
return  FILE  TYPE; 

function  NUMBER_OF_ELEMENTS  (FILE :  FILE  TYPE) 
return  NATURAL; 

procedure  set_prompt (terminal;  file  type; 

PROMPT ;  STRING) ; 
function  get_prompt (terminal;  file_type) 
return  STRING; 

function  INTERCEPTED_CHARACTERS (TERMINAL:  file_type) 
l  return  Characterarray  : 

procedure  ekable_function~iceys (terminal :  file_type; 

ENABLE :  BOOLEAN) ; 

function  function keysenabled (terminal:  file_type) 
return  boolean; 


procedure  COUPLE (QUEUE_BASE: 

QUEUE”  KEY : 

QUEUE  JiELATI  ON : 
FILE  NODE: 

FORM? 

ATTRIBUTES: 

ACCESSCONTROL 

LEVEL:” 

procedure  couple  (queuename: 

FILENODE: 

FORM: 

ATTRIBUTES: 
ACCESS  CONTROL: 
LEVEL:” 

procedure  couple  (QUEUE  base: 

queue”  KEY: 
queue'relation 

FILENAME: 

FORM? 

ATTRIBUTES: 
ACCESS_CONTROL : 
LEVEL: 

procedure  COUPLE  (QUEUENAME: 

FILE_NAME: 

form” 

ATTRIBUTES: 
ACCESS_CONTROL : 
LEVEL: 


NODE_TYPE; 

R£LATIONSHIP_KEY  :=  LATEST_KEY ; 
RELATIONNAME  :  =  DEFAULT_RELATION; 
NODE_TYPE; 

LISt”tyPE  :■  EMPTYLIST ; 

LIST”TYPE ; 

—  Intentionally  no  dafault 


EMPTY_LIST ; 
EMPTY  LIST) ; 


LIST  TYPE  :=  EMPTY  LIST; 

LISTJTYPE  :  =  EMPTy“lIST)  ; 

NAME  STRING; 

NODE” TYPE; 

LISt”tyPE  :=  EMPTY  LIST; 

LIST~TYPE; 

list”type 
list'type 

NODE  TYPE; 

RELATIONSHIPKEY  :=  LATEST  KEY; 
RELATION  NAME  :=  DEFAULT  RELATION; 
NAMESTRING; 

LIST”TYPE  :=  EMPTY_LIST 
LIST~TYPE; 

LISt”tYPE  :=  EMPTY_LIST ; 

LIST”TYPE  : =  EMPTy”lIST) ; 

NAME  "STRING ; 

NAME”  STRING; 

LISt'tYPE  :=  EMPTY_LIST ; 

LIST”TYPE; 

LISt'tYPE  :=  EMPTY_LIST ; 

LIST-TYPE  : *  EMPTy”lIST) ; 


L 


end  io_control; 

generic 

type  element_type  is  private; 
package  direct_io  is 
use  NODEJ5EFINITIONS; 

use  list”utilities; 

use  IO_DEFINITIONS; 

subtype  FILE_TYPE  is  CAIS.  I0_DEFINITI0NS.FILE_TYPE; 
subtype  file”node  is  cais. io”definitions.file  jiode; 

type  count  is  range  o  integer’LasT; 

subtype  positive_count  is  count  range  1  .  count-last; 
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Flic  aanageaent 


procedure 


procedure 


procedure 


procedure 


CREATE (FILE . 

BASE: 

KEY: 

RELATION: 

NODE: 

FORK: 

ATTRIBUTES: 
ACCESS  CONTROL: 
LEVEL:" 

CREATE (FILE: 

NAME: 

MODE: 

FORM: 

ATTRIBUTES: 
ACCESS  CONTROL: 
LEVEL:" 


in  out 


FILEJYPE : 

NODE "type : 

RELATIQNSHIPJCEY  :=  LATEST  JCEY; 

relation_nam£  :* 

DEFAULT  RELATION; 


in  out 


FILE_MODE  := 
LIST_TYPE  := 
LIST~TYPE  :« 

list“type  :* 

LISTJYPE  := 
FILE* TYPE; 
NAME "STRING; 

FILe"mODE  := 
LISTJYPE  :  = 
LIST_TYPE  := 
LIST_TYPE  := 
LIST  TYPE  :  = 


INOUT  FILE; 
EMPTy'lIST; 
EMPTY~LIST; 
EMPTY"LIST; 
EMPTy'lIST) ; 


INOUT_FILE; 
EMPTY_LIST. 
EMPTY~LIST; 
EMPTY~LIST; 
EMPTY  LIST) . 


OPEN (FILE: 
NODE 
MODE 
OPEN (FILE: 

NAME 

MODE 


in  out  FILEJYPE: 
NODEJYPE; 
FILEMODE) ; 
in  Out  FILEJYPE ; 

NAMESTRING; 
FILE  MODE) ; 


procedure  close  (FILE:  in  out  FILE  TYPE) . 
procedure  DELETE  (FILE:  in  out  FILE  TYPE) ; 
procedure  reset  (FILE :  in  out  file_Type; 

MODE :  FILEMODE) ; 

procedure  RESET  (FILE:  in  out  FILETYPE)  ; 


function  MODE  (FILE 
function  name  (FILE 
function  FORM  (FILE 


FILETYPE)  return  FILEMODE; 
file’type)  return  string. 
file~type)  return  string; 


function  is_open(file.  file  type)  return  boolean; 
—  Inpat  And  output  opuntlona 


procedure  read  (FILE: 

ITEM: 

FROM: 

procedure  READ  (FILE: 

ITEM: 


FILEJYPE; 

OUt  ELEMENT  TYPE; 

POSITIVE_COUMT) ; 
FILEJYPE; 
out  ELEMENT  TYPE)  ; 


procedure  write(file:  file  type; 

ITEM:  ELEMENT  TYPE; 

TO:  POSITIVE_COUNT) ; 

procedure  write  (FILE:  filejype; 

ITEM :  ELEMENT  JYPE)  ; 

procedure  set  index  (file;  file  type; 

TO:  POSITTVE_COUNT) ; 

function  index  (file:  filejype)  return  positiye_count; 
function  size  (file:  filejype)  return  count; 

function  end_of_file (file ;  file_type)  return  boolean; 

end  DIRECT  10; 


generic 

type  element JYPE  in  private; 
package  sequential  JO  in 
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use  NODE_DEF I  HI  T 1 0  NS ; 
use  LIST_UTILITIES; 
use  IO_DEFINITIONS ; 

subtype  filejtype  is  cais.  io_definitions. filejtype; 
subtype  file-mode  is  cats. io-definitions.file_mode; 


—  Fils  ssaagtssnt 


s 


procedure  CREATE  (FILE:  in  out 

BASE: 

KEY : 

RELATION: 

MODE: 

FORM: 

ATTRIBUTES: 

ACCESS  CONTROL : 

LEVEL:" 

procedure  create  (FILE:  in  out 

NAME: 

MODE: 

FORM: 

ATTRIBUTES: 

ACCESS  CONTROL: 

LEVEL:" 

procedure  open  (file:  in  out  file_type; 

NODE:  NODEJTYPE; 

MODE:  FILE  MODE): 


FILE_TYPE ; 

NODE_TYPE ; 

RELATIONSHIPJCEY  :=  LATEST_KEY: 
RELATION  NAME  :=  DEF AULT_RELAT ION. 
FILE  MODE  :=  INOUT_FILE:~ 
LIST~TYPE  :=  EMPTYLIST; 

LISTJTYPE  :=  EMPTY  J-IST; 

LIST  TYPE  :=  EMPTYJ.IST; 

LIST-TYPE  :=  EMPTY- LIST) ; 

FILE* TYPE. 

NAME^STRING; 

FILE-MODE  :»  INOUTFILE; 

LIST” TYPE  :=  EMPIY_LIST; 

LIST-TYPE  :=  EMPTY_LIST ; 

LIST” TYPE  :=  EMPTTJLIST; 

LIST~TYPE  : =  EMPTY  LIST) ; 


procedure  open  (FILE: 

NAME: 

MODE: 


in  out  FILE  TYPE. 

NAME~STRING. 
FILE  MODE  ); 


procedure  CLOSE  (FILE: 
procedure  DELETE  (FILE: 
procedure  RESET  (FILE: 

MODE: 

procedure  reset  (FILE: 


in  out  FILEJIYPE)  ; 
in  out  filIjtype)  ; 
in  out  FILE  TYPE; 

FILE-MODE) ; 
in  out  FILE_TYPE)  ; 


function  mode  (FILE 
function  name  (FILE 
function  form(file 


file_type)  return  file_mode; 
file” type)  return  string; 
file  type)  return  string; 


function  is  open(file:  file  type)  return  boolean; 


—  Input  son  output  opsrstlons 

procedure  READ  (FILE:  FILE_TYFE; 

ITEM:  out  ELEMENT  JTYPE) ; 
procedure  WRITE  (FILE:  FILE  TYPE; 

ITEM:  ELEMENT_TYPE) ; 

function  end_of_filecfile:  file_type)  return  boolean; 
end  SEQUENT IAL_I0; 

package  text  io  is 

use  NODE_DEFINITIONS; 
use  LISTJJTILITIES; 
use  IO_DEFINITIONS; 

subtype  file_type  is  cais.  io_definitions. file  jtype; 
subtype  file_mode  is  cais. io-definitions  file’mode; 

type  count  is  range  o  integer 'LAST; 
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subtype  posit iye_count  is  court  range  i  ..  count- last; 

UNBOUNDED  :  constant  COUNT  :  =  0;  —  Una  and  paga  langth 

subtype  field  is  integer  range  o  . .  integer'Last; 

subtype  nuwber_base  is  integer  range  2  ..  to ; 

type  type_set  is  (lower_case.  upper  case)  ; 


—  Flla  Uanagasant 


procedure  create  (FILE 
BASE: 

KEY: 

RELATION: 

NODE: 

FORN: 

ATTRIBUTES: 
ACCESS_CONTROL : 
LEVEL:' 

procedure  create  (FILE: 

NAME: 

NODE: 

FORN: 


in  out 


in  out 


ATTRIBUTES: 


ACCESS_CONTROL: 

LEVEL:' 


procedure  open  (file: 

NODE: 

NODE: 

procedure  open  (FILE: 

NAME: 

MODE: 


in  out  FILE  TYPE: 
NODE 'TYPE; 
FILE~NODE) ; 

in  out  file'type; 

NAMESTRING 

file'mode) ; 


FILE_TYPE; 

NODe'tYPE ; 

RELATIONSHIPS  :=  LATEST_KEY ; 
RELATION_NAME  :=  DEFAULT_RELATION ; 
FILE  NODE  :*  IN0UT_FILE;“ 
LISt'tYPE  :s  EMPTY~LIST; 

LIST'TYPE  :=  EMPTY'LIST; 

LIST_TYPE  :»  EMPTY_LIST; 

LIST'TYPE  : =  EMPTY~LIST) ; 
FILE_TYPE; 

NAMESTRING ; 

FILE_NODE  :=  INOUT_FILE; 

LIST'TYPE  :=  EMPTY~LIST ; 

LIST'TYPE  :=  EMPTY'LIST; 

LIST'TYPE  :=  EMPTY'LIST: 

LIST  TYPE  : =  EMPTY~LIST) ; 


procedure  close  (FILE: 
procedure  delete  (FILE: 
procedure  RESET  (FILE: 

NODE: 

procedure  RESET  (FILE: 


in  out  FILE_TYPE) ; 

in  out  FILE  TYPE) 
in  out  FILE  TYPE: 

file'mode) ; 
in  out  file'type)  : 


function  mode  (FILE 
function  name  (FILE 
function  form  (file 


filejtype)  return  file  node; 
file'type)  return  string: 
file  type)  return  string: 


function  is  open  (file:  file  type)  return  boolean; 


—  Control  of  dafault  input  and  ontpnt  fllas 
procedure  SET_INPUT(FILE:  FILEJTYPE); 

procedure  set'output (file:  file  type): 

procedure  SET_ERROR(FIL£:  FILE_TYPE)  ; 


function  st andard_ input  return  filejtype. 
function  standard_output  return  filejtype; 
function  standard_error  return  filejtype. 

function  current  input  return  filejype; 
function  current_output  return  filejtype; 
function  current  error  return  file  type. 
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—  spacification  of  lloo  and  pagt  ltngtbt 

procedure  set  like  length (file:  file  type; 

TO :  COWrr)  ; 

procedure  set_like_length  (to  :  court); 

procedure  set_page_length (file .  file  type; 

TO:  COURT); 

procedure  SET_PAGE_L£HGTH  (TO :  COURT)  ; 

function  lire_length(filE:  file_type)  return  court  ; 
function  LIRE_length  return  court  ; 

function  page_length(filE:  file  type)  return  court; 
function  pace  lercth  return  couirr; 


—  Column,  Lint  and  Pagt  Control 
procedure  kew_lire(filE:  file  type; 

SPACIRG :  PCSITIVE_COUNT  :=  1); 

procedure  rew_line (spacing:  positive_court  :=  D; 

procedure  SKIP_LIRE(FILE:  FILE_TYPE; 

SPACING:  POSITIVE_COURT  :=  1); 
procedure  SXIP_LIRE (SPACING:  POSITIVE ~court  :=  1); 

function  end_of_lire(file:  file  type)  return  boolean; 
function  endjjf^line  return  boolean; 

procedure  NEW  PAGE (FILE:  FILE  TYPE); 
procedure  REN_PAGE ; 

procedure  SKIP_PACE(FILE:  FILE  TYPE); 
procedure  SXIPPAGE; 

function  end_uf  page(FILE:  file_TYPE)  return  boolean; 
function  end  of'page  return  boolean; 

function  ekd_of_file(filE:  FILE_TYPE)  return  boolean; 
function  end  of  file  return  boolean; 


procedure  SET_COL  (FILE :  FILE_TYPE; 

TO :  POSITIYE_COURT) ; 

proced  U  re  SET_COL  (TO :  POS  ITIVE_c6uKT)  ; 

procedure  set_lire(file:  file  type; 

TO:  POSITIVECOUNT) ; 

procedure  set_line(to:  positive_couht)  ; 


function  col  (FILE:  file_type)  return  positive_courT; 
function  col  return  positive  courT; 

function  lire(File:  file_type)  return  positive_count; 
function  line  return  pos?tive_court; 

function  page  (file:  file_type)  return  positivecount; 
function  page  return  positive  count; 

—  Characttr  Input-Output 

procedure  get(file:  file_type; 

ITEM:  out  CHARACTER) ; 
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procedure  GET  (ITEM:  out  CHARACTER)  ; 
procedure  PUT(FIL£:  FILEJTYPE ;  ITEM  :  CHARACTER); 
procedure  put  (item:  character); 


—  String  Inpot-Ootpnt 

procedure  GET  (FILE:  FILEJTPE;  ITEM  Out  STRING)  ; 

procedure  getutem:  out  string)  ; 

procedure  PUT  (FILE:  FILEJTPE;  ITEM  :  string): 

procedure  put  (item:  string); 

procedure  get_LINE(FIL£:  file_type; 

ITEM:  out  STRING; 

LAST:  OUt  NATURAL)  ; 
procedure  get_line (item:  out  string; 

last  :  out  NATURAL)  ; 

procedure  PUTJ.INE  (FILE :  FILE_TTPE;  ITEM:  STRING); 
procedure  put”li ne ( item :  string); 

—  generic  package  for  Input-Output  of  Integer  Type* 
generic 

type  num  is  range  <>, 
package  integer  IO  ia 

DEFAULT_WIDTH:  FIELD  :=  NUM  *  WIDTH ; 

DEFAULT~BASE :  NUMBER_BASE  :=  10; 

procedure  getcfile:  FlLEJTPt ; 

ITEM:  OUt  NUM; 

WIDTH:  FIELD  :»  0); 

procedure  get  (ITEM:  out  NUM; 

WIDTH:  FIELD  :=  0); 

procedure  put  (FILE:  FILE_TTPE; 

ITEM:  NUM; 

WIDTH:  FIELD  :»  DEFAULTJTIDTH: 

BASE:  NUMBER_BASE  :»  DEFAULT_BASE) ; 

procedure  PUT  (ITEM:  num; 

WIDTH:  FIELD  :s  D EF AULT_W I DTH ; 

BASE :  NUMBER_BASE  : =  DEFAULT_BASE) ; 

procedure  GET  (FROM:  STRING; 

ITEM:  out  NUM; 

LAST:  OUt  POSITIVE)  ; 
procedure  PUT  (TO:  out  string. 

ITEM:  NUM; 

BASE:  NUMBER_BASE  :=  DEFAULT_BASE) ; 

end  INTEGER_I0; 

_  generic  package  for  Input-Output  of  Floating  Point 

generic 

type  NUM  is  digits  <>. 
package  float_io  is 

DEFAULT_F0RE:  FIELD  *  2;  , 

DEFAULT_AFT:  FIELD  :*  NUM 'DIGITS  -  t; 
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DEFAULT_EXP :  FIELD  :.=  3; 


procedure  GET  (FILE: 

ITE*: 

WIDTH: 

procedure  get  (ITEM  . 

WIDTH: 

procedure  PUT (FILE: 

ITEM: 

FORE: 

AFT: 

EXP: 

procedure  PUTdTEM: 

FORE: 

AFT: 

EXP: 

procedure  get  (from: 

ITEM: 

LAST: 

procedure  put  (TO: 

ITEM: 

AFT: 

EXP: 

end  float  io; 


FIL£_TYPE; 
out  HUM;” 

FIELD  :=  0); 
out  HUM: 

FIELD  :=  0); 

FILE_TYPE; 

HUM;” 

FIELD  :  =  DEFAULT_FORE; 
FIELD  :=  DEFAULt'aFT; 
FIELD  :=  DEFAULT'EXP) ; 

HUM; 

FIELD  :=  DEFAULT_FORE; 
FIELD  :=  DEFAULt'aFT; 
FIELD  :*  default'exp) ; 

STRING; 
out  HUM: 
out  POSITIVE)  ; 
out  STRING: 

HUM; 

FIELD  :=  DEFAULTAFT; 
FIELD  :=  DEFAULT  EXP) 


--  ganafle  packaga  for  Input-Output  of  Flxad  Point  Tjrpoa 


generic 

type  hum  is  delta  <>; 
package  fixedio  is 


DEF  AULT_F0RE :  FIELD 
DEFAULTAFT:  FIELD 
DEFAULTEXP:  FIELD 


HUM-FORE; 

HUM-AFT; 

o; 


procedure  get  (file: 

FILE_TYPE; 

ITEM: 

out  NUM;  ~ 

WIDTH 

FIELD  :*  0); 

procedure  GET  (ITEM: 

out  MUM; 

WIDTH 

FIELD  :=  0) ; 

procedure  put(FILE: 

FILE  TYPE; 

ITEM: 

HUM;” 

FORE: 

FIELD  :=  DEFAULT_FORE; 

AFT: 

FIELD  :»  DEFAULT” AFT; 

EXP: 

FIELD  ■ *  default'exp) ; 

procedure  PUT  (ITEM: 

HUM; 

FORE: 

FIELD  :=  DEFAULT  FORE; 

AFT: 

FIELD  :»  DEFAULT'AFT; 

EXP: 

FIELD  :  =  DEFAULT  JDCP) ; 

procedure  get  (FROM: 

STRING; 

ITEM: 

out  HUM; 

LAST: 

out  POSITIVE); 

procedure  pur  (TO: 

out  STRING; 

ITEM: 

HUM; 

AFT: 

FIELD  :=  DEFAULT_AFT; 

EXP: 

FIELD  :=  DEFAULT'EXP) 

end  FIXED  10; 
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--  generic  package  for  Input-Ontput  of  Enumeration  Type a 
generic 

type  enum  is  (<>) : 
package  enumeration  io  ia 


DEFAULT  JTIDTH :  FIELD  :  =  0; 

DEFAULT^SETTING:  TYPE_SET  :  =  UPPER_CASE; 

procedure  get(file:  file_type;  item  :  out  enum) ; 
procedure  get(item:  out  enum)  ; 


procedure  put  (FILE: 

ITEM: 

■IDTH 

SET: 

procedure  put(item: 

WIDTH 
SET  ■ 


file_type; 

enum” 

FIELD  :=  DEF AULT_WIDTH : 
TYPE_SET  :=  DEF AULT_SETTI NG) ; 

enumT 

FIELD  :=  DEF AULT _WIDTH; 

TYPE  SET  : =  DEFAULT  SETTING) ; 


procedure  GET  (FROM: 

ITEM: 

LAST: 

procedure  PUT  (TO: 

ITEM: 

SET: 

end  ENUMERATIONIO; 


STRING; 
out  ENUM; 
out  POSITIVE)  ; 
out  STRING; 

ENUM; 

TYPE  SET  : =  DEFAULT  SETTING) ; 


end  TEXT  10; 


package  scroll  terminal  ia 
uae  node  definitions. 
uae  IO_DEFINITI0NS ; 
uae  IQCONTROL; 

aubtype  FILE  TYPE  ia  CAIS. IO_DEFINIT10NS.FILE_TYPE; 
subtype  FUNCTION JCEY  DESCRIPTOR  ia 

CAIS. I0_DEFINITI0NS  FUNCTION  KEY-DESCRIPTOR; 
aubtype  POSITIOMTYPE  ia  CAIS. I0_DEFIITI0NS. POSITION-TYPE; 
aubtype  tabeumeration  ia  cais .  io_definitions  . tab  enumeration ; 


procedure  SET  POSITION  (TERMINAL :  FILE  TYPE; 

POSITION:  POSITION-TYPE)  . 
procedure  set  position (position:  position”type)  ; 
function  GET_POSITION (TERMINAL:  FILE_TYPE) 
return  position  TYPE; 

function  get  position  return  position  type; 
function  TERMINAL-SIZE (TERMINAL:  file_type) 
return  position_type; 

function  terminal_size  return  position  type; 
procedure  set  tab (terminal:  file  type” 

KIND:  TABENUMERATION  :=  HORIZONTAL) ; 

procedure  SETTAB  (KIND:  TABENUMERATION  :*  HORIZONTAL)  ; 

procedure  clear_tab(terminal7  file_type; 

KIND:  TABENUMERATION  :  =  HORIZONTAL); 

procedure  clear_tab(kind.  tab -Enumeration  =  horizontal); 
procedure  taboerminal:  file_type; 

KIND:  TAB  ENUMERATION  «  HORIZONTAL; 

COUNT:  POSITIVE  :*  1); 

procedure  tab  (kind:  tabenumeration  >  horizontal; 

COUNT:  POSITIVE  *1); 
procedure  BELL  (TERMINAL:  FILE -TYPE)  ; 
procedure  BELL; 

procedure  put  (terminal  :  file_type; 

ITEM :  CHARACTER)  ; 


242 


PROPOSED  MIL-STD-C  \1S 
31  1AM  ARV  I98S 

pr>  cedure  PUT(ITEK:  CHARACTER); 
pr'  cedure  PUT  (TERR  INAL:  FILE  TYPE; 

ITEM:  STRING); 

pr>  cedure  put(item:  string); 

pr’  cedure  set_echo (terminal;  file  type; 

TO:  BOOLEAN  :=  TRUE) ; 

procedure  set_echo(to;  boolean  =  true); 
function  ECHO  (TERMINAL:  FILE_TYPE) 
return  boolean; 
function  echo  return  BOOLEAN; 
function  maximum_function_key (terminal;  file  type) 
return  natural ;- 

function  maximunfunction  key  return  natural; 
prr  cedure  GET  (TERMINAL:  ~  FILE_TYPE ; 

ITEM:  Out  CHARACTER; 

KEYS:  out  FUNCTION_KEY_DESCRIPTOR) ; 

procedure  GET ( ITEM :  out  CHARACTER; 

KEYS:  out  FUNCTION_KEY  DESCRIPTOR); 

procedure  get  (terminal;  file'type; 

ITEM:  out  STRING; 

LAST:  OUt  NATURAL; 

KEYS  :  out  FUNCTION  KEYJ3ESCRIPT0R)  ; 

procedure  GET  (ITEM :  out  STRING; 

LAST:  out  NATURAL: 

KEYS:  out  FUNCTI ON_KEY  DESCRIPTOR); 
function  FUNCTIONJCEY_COUNT(KEYS:  FUNCTIQN_KEY_DESCRIPTOR) 
return  natural; 

procedure  FUNCTI 0N_KEY( KEYS:  FUNCTION_KEY ^DESCRIPTOR ; 

INDEX:  POSITIVE- 

KEYIDENTIFIER :  out  POSITIVE; 

POSITION :  Out  NATURAL)  . 

procedure  FUNCTION  JCEY_NAME (TERMINAL:  FILE  TYPE. 

KEYIDENTIFIER:  POSITIVE;’ 

KEY  NAME:  Out  STRING; 

LAST:  Out  POSITIVE); 

procedure  functi on_key_name (k£Y_identifier :  positive; 

KEY  NAME:  Out  STRING; 

LAST:  out  POSITIVE)  ; 

procedure  newline (terminal ;  FILE  TYPE; 

COUNT:  POSITIVE  :=  J); 

procedure  NEWLINE  (COUNT :  POSITIVE  :=  1); 
procedure  newp  age  (terminal:  file  type). 
procedure  new-page; 

end  SCROLL  TERMINAL ; 

package  page  terminal  ia 
use  NODE_DEFINITIONS; 
use  IO_DEFINITIONS; 
use  io'cONTROL; 

subtype  FILE_TYPE  is  CAIS.IO  DEFIITIONS .  FILE  TYPE; 
subtype  FUNCTI ON_KEY_DESCR  I FTOR  is 

CAIS.IO  DEFINITIONS. FUNCTION  KEY  DESCRIPTOR; 

subtype  position  type  is  ~ 

CAIS.IO  DEFINITIONS. POSITION  TYPE 
subtype  tab_enumeration  is  " 

CAIS . IO_DEFINITIONS . TAB_ENUMERATION ; 

type  SELECT  ENUNERATION  is 

(FROM_ACTIVE_POSITION_TO  END. 

FROM_START  TO  ACTIVE'pOSITION. 

ALL_POSITIONsF ; 

type  GRAPHIC_RENDITION  ENUMERATION  is 
(PRIMARY- REND ITIOnT  BOLD, 
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FAINT.  UNDERSCORE. 

SLO«_BLINK.  RAPID_BLINK . 

REVERSE_IMAGE)  ;' 

type  GR  \PHIC  ~R£NDITION_ARRAY  is  array 

(GR\PHICJlENDITION_ENUMERATION)  of  BOOLEAN; 

DEFAULT  :RAPHIC_R£NDITION:  constant  GRAPHIC_R£NDITION_ARRAY 

(PRIMARYRENDITION  => 

TRUE, 

BOLD  . .  REVERSE  IMAGE  => 

FALSE)  ; 

proced  re  SET_POSITION (TERMINAL:  FILE_TYPE; 

POSITION:  POSITION_TYPE) ; 
proced'  re  set_positi  on  (position:  position  'type)  ; 
function  GETPOSITION 

(TERMINAL:  FILE_TYPE)  return  POSITION_TYPE; 

function  get  position  return  position_type; 
function  terminal_size 

(TERMINAL:  FILE_TYPE)  return  POSITIONJYPE; 
function  TERMINAL_SIZE  return  POSITION_TYPE; 
proced  ire  SET_TAB 

(TERMINAL:  FILE_TYPE ; 

KIND:  TAB  ENUMERATIQN  :=  HORIZONTAL); 

proced  -  <  re  set  tab 

(KIND:  TAB_ENUMERATION  =  HORIZONTAL); 
proced'  re  clear  tab 

(TERMINAL:  FILE  TYPE; 

KIND:  TAB_ENUMERATI ON  : =  HORIZONTAL) ; 

procedure  CLEAR  TAB 

(KIND:  TAB_ENUMERATI ON  :*  HORIZONTAL); 
proced  re  tab 

(TERMINAL:  FIL£_TYPE. 

KIND:  TAB_ENUMERATI ON  :=  HORIZONTAL. 

COUNT.  POSITIVE  :=  l); 

procedure  tab 

(KIND:  TAB_ENUMERATION  :=  HORIZONTAL; 

COUNT:  POSITIVE  :=  1) ; 

procedure  bell 

(TERMINAL:  FILE_TYPE) ; 

proced i  re  bell; 

procedi  re  put  (terminal:  file_TYPE; 

ITEM:  CHARACTER); 

procedure  put  (item  :  character); 
procedure  put(terminal:  file_type; 

ITEM :  STRING) ; 

procedure  PUT  (item:  string); 
procedure  set_echo (terminal:  file_type; 

TO :  BOOLEAN  : =  TRUE) ; 

procedure  SET_£CH0(T0:  BOOLEAN  :*  TRUE); 
function  echoI terminal:  file  type)  return  boolean; 
function  echo  return  boolean; 
function  maximum  functicn  keys 

(TERMINAL:  FILE_TYPE)  return  NATURAL; 
function  maximum  function  keys  return  natural; 
procedure  get  (terminal  :  file_type; 

ITEM:  OUt  CHARACTER; 

KEYS:  OUt  FUNCTI0N_KEY_DESCRIPTOR) ; 

procedure  get(item:  out  character; 

KEYS:  OUt  FUNCTION_KEY_DESCRIPTDR) ; 
procedure  get  (terminal:  file'type; 

ITEM  out  STRING; 

LAST:  OUt  NATURAL; 

KEYS  :  OUt  FUNCTION  KEY  DESCRIPTOR)  . 
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CLOSE  ( YODE)  ; 

raise  : 

end  KOBE  AT  "RIBUTE  ITERATE; 


procedure  ..-h_attribute_iterate 

(ITEP'TOr”  out  ATTRIBUTE_ITERATOR; 

BASF  MODE  TYPE” 

KEY:  RELATIONSHIP  JCEY; 

RELATION:  RELATI QN_KAME  :  =  DEPAULT_RELATION; 

PATTERN:  attributI_paTTERH  :=  *•*)  is  separate. 


procedure  'ATH_ATTRIBUTE_ITERATE 

(ITET  vTOr”  out  ATHI I BUTE_ ITERATOR ; 

NAME:  NAMESTRING; 

PATTERN:  ATTRIBUTE^ PATTERN  :=  •**) 

is 

BASE  :  NODE_TYPE ; 

begin 

OPEN  (BASE.  BASEPATH  (NAME).  (1  =>  READ_RELATIONSHIPS) )  ; 

PATH  ATTRIBUTE  ITERATE 

(ITERATOR,  Ease.  tASTJCEY  (NAME).  LAST_R£LATION  (NAME)  .  PATTERN). 
CLOSE  (BASE); 
exception 
when  others  => 

CLOSE  (BASE)  ; 
raise; 

end  pathattributeiterate. 


function  MORE  ( ITERATOR :  ATTRIBUTE_ ITERATOR) 
return  boolean 

is 

RESULT  BOOLEAN; 

begin 

—  ahould  Da  daflnad  by  lsplasantor 
return  result. 
end  more; 

procedure  get_next( iterator:  in  out  attribute_ iterator; 

ATTRIBUTE :  Out  ATTRIBUTE_NAME; 

VALUE:  in  out  LIST_TYPE) 

is 

begin 

null:  —  ahoold  ba  daflnad  by  lsplasantor 
end  get_next  , 

end  attributes; 


separate  (CAIS) 

package  body  access_control  is 
use  NOD£_DEFINITIONS; 

use  NODE  MANAGEMENT; 


procedure  set  access_control (node : 

ROLE  NODE; 
GRANT: 


N0DE_TYPE; 

NODE”  TYPE; 

grant _valuE)  Is  separate; 


procedure  set_access_control  (name  : 

ROLEJUME: 

GRANT: 

is 

NODE.  ROLE_NODE  NODE_TYPE: 

begin 

OPEN  (NODE.  NAME.  (1  =>  CONTROL)); 


NAME_STRING. 
name” STRING; 
GRANT  VALUE) 
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procedure  GET_node  attribute 

"NODE:  ~  ~  NODE  TYPE; 

ATTRIBUTE:  ATTRIBUTE  _HAME ; 

VALUE.  in  out  LIST_TYPE)”  is  separate; 


procedure  get_node  attribute 

NAME :  ~  ”  NAME_STRING; 

ATTRIBUTE:  ATTRIBUTX_NAME : 

VALUE.  in  out  LIST  TYPE)” 


to 

NODE  :  NODE_TYPE; 
begin 

OPEN  (TODE.  NAME.  <1  =>  READ_ATTRIBUTES) ) ; 
GETJtC  'E_ATTRIBUTE  (NODE,  ATTRIBUTE.  VALUE); 
CLOSE  NODE) ; 


except  on 
when  others  => 


a  SE  (NODE); 

re  e; 

end  GET  ODE  ATTRIBUTE; 


proce<  ;re  GET_PATH_ATTRIBUTE 

EASE :  ~  ~  NODE_TYPE; 

KEY:  RELATIQNSHIPJCEY; 

RELATION:  RELATION  NAME  ;*  DEFAULT  RELATION; 

ATTRIBUTE:  ATTRI8UTE_NAME; 

value:  in  out  LIST_TYPE)”  ia  separate; 


procedure  GET  path  attribute 

NAME :  *  NAME  STRING; 

ATTRIBUTE:  ATTRIBUTE  NAME; 

VALUE:  in  OUt  LIST_TYPE)~ 

is 

BASE  NODE  TYPE; 
begin 

OPEN  (1ASE.  BASE  PATH  (NAME).  (1  =>  READ_RELATIONSHIPS) ) ; 
GET^P/  'H  ATTHIBUTE 

(B/  ;eT  LAST  KEY  (NAME) .  LAST_RELATION  (NAME) , 

AT  TRIBUTE, 'value)  ; 

CLOSE  BASE) ; 
except  on 
when  others  => 

Cl  )SE  (BASE)  ; 
rr  ise; 

end  OE  PATHJOTRIBUTE; 


procedure  node_aTTRIBUTE_ITERate 

;  iterator”  OUt  ATTRIBUTX_ITE3lATOR; 

NODE :  NTOETYPe”; 

PATTERN:  ATTRIBUTE_PATTERN  :=  "•*)  is  separate; 

procedi  -e  node_attribute_iterate 

erator”  out  ATTRIBUTE_ITERATOR; 

VE:  NAME_STRING ; 

PATTERN:  ATTRIBUTE _PATTERN  :*  ***) 

is 

NODE  :  NODE_TYPE; 
begin 

OPEN  ('00E.  NAME,  (l  *>  READ _ ATTRIBUTES)) ; 

NODE_A .TRIBUTE^ITERATE  (ITERATOR,  NODE,  PATTERN); 

CLOSE  NODE) ; 
except  on 
when  others  s> 


rnopo^Fn  \iil-'TI>-c\\n 
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procedure  ielete_path  attribute  (base:  node_type; 

KEY:  RELATIOKSHIPKEY. 

RELATION :  RELATI 0N_NAME  :=  DEF AULT_RELATI ON ; 

ATTRIBUTE:  ATTRIBUTE  KAKE)  is  separate . 

procedure  ->elete  path  attribute  (hake  :  name_string; 

ATTRIBUTE:  ATTRIBUTE_NAME) 

is 

BASE  :  MODE_TYPE; 

begin 

OPEN  (BASE.  BASEPATH  (HAKE).  (1  =>  IRITE_R£LATIONSHIPS) ) : 

DELETE_PATH  ATTRIBUTE 

(BASE.  LAST  KEY  (NAME)  ,  LAST_R£LATI ON  (NAME)  .  ATTRIBUTE)  ; 

CLOSE  (BASF) ; 
exception 
when  oth«  rs  => 

CLOSE  (1ASE). 
raise; 

end  DELETE  ’ATH  ATTRIBUTE: 


procedure  :et  node  attribute  (node:  node_type; 

ATTRIBUTE:  ATTRIBUTENAME : 

value:  list_type)  is  separate: 

procedure  :et_node_attribute (name :  name  string. 

ATTRIBUTE:  ATTRIBUTENAME ; 

VALUE:  LISTTYPE) 

is 

NODE  :  NODr  TYPE ; 
begin 

OPEN  (NODE  NAME.  (1  =>  VRITE_ATTRIBUTES) ) : 

SET  NODEA' TRIBUTE  (NODE.  ATTRIBUTE.  VALUE); 

CLOSE  (NOD  )  ; 

exception 
when  others  => 

CLOSE  (NODE); 

raise: 

end  SET_NOr  I  ATTRIBUTE; 


procedure  set  pathattr  ibute 
(BAS’"  NODE_TYPE ; 

KEY  RELATIONSHIP  KEY; 

RELATION:  R£LATION_NAME  :*  DEFAULT  RELATION; 

ATTr  IBUTE:  ATTRIBUTE_NAME; 

value:  list_type7  is  separate; 

procedure  set  path  attr ibute (name :  name  string; 

ATTRIBUTE:  ATTRIBUTE  NAME; 

VALUE:  LIST  TYPeT 

is 

BASE  :  NODF  TYPE; 
begin 

OPEN  (BASE.  BASE  PATH  (NAME).  (1  =>  WRITE  RELATIONSHIPS) ) ; 
SET_PATH_A . TRIBUTE 

(BASE?  L  \ST  KEY  (NAME) .  LAST_RELATION  (NAME) .  ATTRIBUTE ,  VALUE) ; 
CLOSE  (BASF); 
exception 
when  oth  rs  => 

CLOSE  (3ASE); 
raise; 

end  SET  PATH  ATTRIBUTE; 
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USe  NODE_RAJtAGERENT ; 

procedure  create_node  attribute 
CIODE:  ~  NODEJTYPE; 

ATTRIBUTE :  ATTRIBUTE_KARE : 
value:  list_type7  is  separate: 

procedure  create_node_attriwte 

(MARE:  ~  NARE_STRING; 

ATTRIBUTE:  ATTRIBUTE_MARE ; 

VALUE:  LIST_TTPE) 

is 

MODE  :  NODEJIYPE: 
begin 

OPEN  (NODE.  MARE.  (1  =>  APPEND_ATTRIKJTES) ) ; 
CREATE  MODE  ATTRIBUTE  (MODE,  ATTRIBUTE.  VALUE); 
CLOSE  (NODE)"; 
exception 
when  others  => 

CLCSE  (NODE) ; 
raise; 

end  CREATE_MODE_ATTRIBUTE; 


procedure  CREATE  PATHATTRIBUTE  (BASE: 

MET: 

RELATION : 

ATTRIBUTE: 

VALUE: 

procedure  CREATE  path  ATTRIBUTE (NARE: 

ATTRIBUTE: 

VALUE: 

is 

BASE  MODETYPE; 
begin 

OPEN  CASE.  BASEPATH  (HARE).  (1  =>  NRITE_ATTRIBUTES) )  ; 

CREATE  PATH  ATTRIBUTE 

(BA  E.  LAST  MET  (RARE).  LAST  RELATION  (MARE).  ATTRIBUTE,  VALUE); 
CLOSE  BASE)  : 
except  on 
when  others  => 

CL  SE  (BASE)  ; 
r:  ise; 

end  CE.  ATEPATHATTR I  BUTE ; 


NODEJTYPE; 

RELATIONSHIP_KEY ; 

RELATI 0 M  MARE  :=  DEFAULTJtELATION ; 
ATTRIBUTEMARE ; 

LIST  TTPE)  is  separate. 

NARESTRING ; 

ATTRIBUTEMARE. 

LIST  TYPE) 


procedure  delete_node_attribute(node; 

ATTRIBUTE: 


MODE_TYPE ; 

attrIbute  mare)  is  separate; 


proce<  ure  delete  mode  attribute  (nare:  narestring  ; 

ATTRIBUTE.  ATTRIBUTEMARE) 

is 

MODE  :  MODE_TYPE; 
begin 

OPEN  C  ODE.  NARE.  (1  *>  WRITE_ ATTRIBUTES) )  ; 

DELETT  NODE  ATTRIBUTE  (NODE.  ATTRIBUTE) ; 

CLOSE  NODE); 
except  on 
when  othera  *> 

C  SE  (NODE); 
raise; 

end  DET  TTE  NODE  ATTRIBUTE; 
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procedure  Iterate 
(ITERATOR: 
NAME 
KIND: 

KEY: 

RELATION: 

.  PRIMARY  ORLY: 

I* 


out  NODE_ITERATOR; 
name'string  : 

NODEJCIND; 

relationship  jcey  pattern  :=  «... 

*ELATION_RAME_PATTERR  :  * 

DEF AULT_R£LaTION . 

BOOLEAN  : =~TRUE) 


"ODE  :  RODE  TYPE; 

begin 

OPER  (RODE.  NAME,  (1  => 
I IfcJtATE  (ITERATOR.  NODE. 

PRIMARY  ONLY)  ; 
CLOSE  (NODE) ; " 

exception 
when  others  *> 

CLOSE  (NODE); 
raise; 

end  ITERATE; 


READ_R£LA7T0NSHIPS) ) ; 
KIND,  KEY,  RELATION, 


function  more  (iterator 

is 


NDOE  ITHlATDH)  return  BOOLEAN 


RESULT  :  BOOLEAR; 
begin 

should  ha  dsflnsd  by 
return  result; 
end  MORE; 


lsplsssDwar 


prutcaure  GET  1 


(ITERATOR:  in  out  NODE  ITERATOR 

OT“YT  Unnc  .  I- _ a  ...  “  ' 


HEXT_NODE:  in  out  NODETYPE. 
i’Tl!rT  intention'  :=(!=>  EXISTTNOO 

j,  -r“rT:  DURATION  :=  NOJ>EuS  ‘ 

begin 

end*  OFT  K]^T*,1'’,ld  -  isj>is»»ator 


procedure  set_current_node(nodE: 
procedure  set_current_node  (name  : 


node_TYPe)  is  separate  ; 
NAME_STRINC) 


"DDE  :  NODE  TYPE; 
begin 

OPEN  (RODE.  NAME,  (1  s> 
SET_CURRENT  NODE  (RODE) ; 

exception 
when  others  -> 

CLOSE  (  ODE)  ; 

raise. 


EXISTENCE)) ; 


end  set_cur"ert_node; 


procedure  get_current_node 


(NODE: 

INTENT: 


end  "O0E_MARAcr  ert; 


TIME_LIMIT: 


in  out  NODE_TYPE; 
INTENTION 
DURATION  :  = 


*  (1  =>  EXISTENCE); 
no_oelay)  is  separate 


separate  (cais) 
package  body  *  [Tributes  is 
use  node_def  NITIONS; 
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procedure  delete_tree(name:  name_siring) 

ia 

NODE  :  N0DE_TYPE; 

begin 

OPEN  (NODE.  NAME.  (EXCLUSIVE_*RITE ,  READ_R£LATIONSHIPS) ) : 
DELETE^TREE  (MODE); 
exception 
when  others  => 

CLOSE  (MODE); 
raise; 

end  DELETE  TREE; 


procedure  link  (node: 

MEWBASE: 

NEWJCEY: 

NEw“r£LATIOM: 


N0DE_TYPE; 

MODE*  TYPE; 

RELATIONSHIP_KEY ; 

RELAT I OM_NAVE  :  = 

DEF AULT_RELATI ON)  is  separate; 


procedure  LINK  (NODE:  NODE  TYPE; 

NEW  NAME:  NAME  STRING) 


is 

NEW  BASE  NODE  TYPE; 
begin 

OPEN  (NEWHASE.  BASEPATH  (MEW  NAME)  ,  (1  =>  APPEMD  RELATIONSHIPS) )  ; 
LINK  (NODE.  MEWBASE?  LAST_KEY~(NEW_KAME) . 

LAST_RELAT ION  (NEW_NAME) ) ; 

CLOSE  (MEWBASE) ; 
exception 
when  others  => 

CLOSE  (MEWBASE): 
raise; 
end  limk  : 


procedure  UNLINK  (BASE:  NODE_TYPE; 

KEY:  RELATIONSHIPJCEY; 

RELATION:  RELATI OMNAME  := 

default_relation)  is  separate; 

procedure  unlink  (name:  name_string) 

is 

BASE  :  NODE_TYPE ; 
begin 

OPEN  (BASE.  BASE  PATH  (NAME) , 

(1  =>  WRITE  RELATIONSHIPS) ) ; 

UNLINK  (BASE.  LAST  KEY  (NAME),  LAST  RELATION  (NAME)); 

CLOSE  (BASE) ; 
exception 
when  others  -> 

CLOSE  (BASE) ; 
raise; 
end  UNLINK; 


procedure  iterate 
(ITERATOR: 
NODE: 

KIND: 

KEY: 

RELATION: 
PRIMARY  ONLY: 


OUt  NODE_ ITERATOR; 

NODEJYPE ; 

NODEJCIND; 

RELATIONSHIP_KEY_PATTERN  :=  •••; 
RELATION  NAME_PATTERN  :* 
D£FAULT_RELATION; 

BOOLEAN  3~true)  is  separate; 
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end  COPY_NOOE; 


procedure  copy_tre£  (from  : 

T0_BASE : 
TOJCEY: 

TO  JIELATION : 

procedure  Copy_tree  (from  : 


NODE_TTPE; 

NODE~  TYPE ; 

RELATIONSHIP_KEY; 
relation  name  ;= 
DEFault_relat:ok)  is  separate; 


N0DE_TYPE; 

name'strihg) 


TO^BASE  :  NODE  TYPE; 
begin 


cqpy_tree 

(from,  to  base, 

CLOSE  (TO  BASE) ; 

exception" 
when  others  => 
CLOSE  (TO_BASE) 

raise; 

end  COPY  TREE; 


lastt^ket  (TO) 


->  APPEND_R£LATI0NSHIPS)) ; 
LAST_RELATION  (TO) ) ; 


procedure  rename  (node; 


SEW  BASE: 
NEw'kEY: 

HEM "RELATION ; 


NODE  TYPE; 

NODE" TYPE; 
RELATIONSHIP  KEY: 
RELATION_NAME  :* 
0E3FAULTRELATI0N) 


procedure  rename  (NODE: 


is 


NEW  NAME: 


NODE_TYPE; 

hame'string) 


is  separate; 


begin 
OPEN  (NEW  BASE 
RENAME 


*  ire. 


“RSE.PATH  (NEW  NAME). 


LASTRELATION  (NEW_NAME) ) ; 


CLOSE  (NEWBASE) 

exception 
when  others  s> 


CLOSE  (NEW  BASE) ; 

raise; 
end  RENAME; 


">  APPEND_RELATIONSHIPS) )  ; 


pro**-,.  in  .««  MODE_TYPE)  i. 

procedure  delete_node(name:  name_strinc) 


node  ;  NODE  TYPE; 

begin 

OPEN  (NODE.  NAME.  (EXCLUSIVE 
DELETE  NODE  (NODE) ; 

exception 


.WRITE, 


when  others  => 


CLOSE  (NODE) ; 

raise, 

end  DELETE_NODE; 


READRELATIONSHIPS) ) ; 


procedure  delete_tres(node: 


in  out  NODEJYPE)  is  separate. 
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return  boolean 

is 

NODE  :  NODE_TYPE ; 

RESULT  :  BOOLEAN: 
begin 

OPEN  (NODE.  BASE.  KEY,  RELATION.  (1  =>  EXISTENCE)); 
RESULT  :=  IS  OBTAINABLE  (NODE); 

CLOSE  (NODE) 7 
return  result; 
exception 

when  others  =>  return  FALSE: 
end  IS  OBTAINABLE: 


function  is_same(nodei : 

NODES : 


NODE_TYPE ; 

node_type)  return  boolean  is  separate; 


function  is_same(namei :  namestring; 

NAMES:  NANE  STRINO)  return  BOOLEAN 

is 

NODE 1 .  NODES  :  NODE_TYPE; 

RESULT  .  BOOLEAN ; 

begin 

OPEN  (NODE1.  NAME1,  (1  =>  EXISTENCE)); 


begin 

□PEN  (NODES.  NAMES.  (1  =>  EXISTENCE)) : 
exception 

when  others  => 

CLOSE  (N0DE1) ; 

raise; 

end; 


RESULT  :=  IS  SAME (N0DE1 .  NODES); 
CLOSE  (NODE!); 

CLOSE  (NODES) : 
return  result; 
end  IS  SAME; 


procedure  get_Parent 


(PARENT: 

NODE: 

INTENT: 

TIME  LIMIT: 


in  out  NODE_TYPE: 

NODE  TYPE; 
INTENTION 
DURATION  : 


:=  (1  =>  READ); 

=  no_delay)  in  separate; 


procedure  copy  node 
(FROM : 

TO_BASE: 

TOJCEY: 

TO 'RELATION : 


NODE_TYPE ; 

NODE 'TYPE ; 

RELATIONSHIPJCEY; 

RELATION_NAME  :=  DEF AULT_R£LATI ON)  is  Separate; 


procedure  copy_node(fron:  node_type; 

TO:  NAME” STRING) 

is 

TO_BASE  :  NODE_TYPE ; 
begin 

OPEN  (TOBASE.  BASE  PATH  (TO).  (1  =>  APPEND  RELATIONSHIPS)); 
COPY_NODE 

(FROM.  TO  BASE.  LAST  KEY  (TO).  LAST_RELATI ON  (TO)); 

CLOSE  (TO_BASE) ; 
exception” 
when  others  => 

CLOSE  (TO_BASE) ; 
raise; 
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procedure  close  (node  :  in  out  node_type)  ia  separate; 

procedure  change_intent 

(NODE:  in  out  NODE_TYPE ; 

INTENT:  INTENTION; 

TINE_LINIT :  DURATION  :=  N0J5ELAY)  ia  separate; 

function  is  open  (node  .  nqdejype)  return  boolean 

ia 

RESULT  :  BOOLEAN; 
begin 

—  should  us  dtflasd  by  laplsasntor 
return  RESULT; 
end  is_open; 

function  intent_of(node:  nqdejype) 

return  INTENTION  ia  separate: 

function  KIND  (NODE;  node  TYPE)  return  nodejcihd  ia  separate; 

function  primary_name  (node  :  node  type) 

return  name_string  ia  separate; 

function  primary  key  (node  ;  node_type) 

return  relationship  key  ia  separate; 

function  primary  relation (node:  node  type) 
return  relationname  is  separate; 

function  PATH_KEY (NODE ;  NODE  TYPE) 

return  RELATIONSHIP  KEY  ia  separate; 

function  PATH_RELATT0N(N0DE;  NODE  TYPE) 

return  relation  name  is  separate; 

function  base_path(name  name  string) 

return  namestring  ia  separate; 

function  LAST_RELATION  (NAME :  NAME  STRING) 
return  relation  name  is  separate; 

function  LASTKEY (NAME ;  NAME  STRING) 

return  RELATIONSHIP JCEY  ia  separate; 

function  is_obtainable  (node  :  node  type) 
return  boolean  ia  separate; 

function  isjjbtainable  (name  :  name  string)  return  boolean 

is 

NODE:  NODE_TYPE ; 

RESULT:  BOOLEAN: 
begin 

OPEN  (NODE.  NAME.  (1  =>  EXISTENCE)); 

RESULT  :*  I S _0BTAI NABLE  (NODE); 

CLOSE  (NODE) 7 
return  RESULT; 
exception 

when  others  =>  return  false; 
end  IS  OBTAINABLE; 


function  is  obtainable 

(BASE:  NODEJYPE; 

KEY:  RELATIONS!  IIP_KEY ; 

RELATION:  RELATIONNAME  :»  DEFAULT_RELATION) 
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With  CALENDAR; 
package  body  CAIS  is 

package  body  node_management  is  separate; 

package  body  ATTRIBUTES  is  separate: 

package  body  access_control  is  separate; 

package  body  structural_nodes  is  separate; 

package  body  process__cdntrol  is  separate; 

package  body  DIR£CT_I0  is  separate; 

package  body  sequential_io  is  separate; 

package  body  text_io  is  separate; 

package  body  io_control  is  separate, 

package  body  scroll  terminal  is  separate; 

package  body  pageteRmimal  is  separate; 

package  body  form  terminal  is  separate; 

package  body  magnetic  tape  is  separate; 

package  body  FlLE_lMPORT_EXPORT  is  separate; 

package  body  LISTJjnLlTTES  is  separate: 
end  cais; 

with  CALENDAR; 
separate  (cais) 

package  body  nodemanagement  is 
use  NOrE_DEFINITIQNS 
Use  CALENDAR, 


procedure  opencnodE:  in  out  node_ttpe; 

NAME;  NAME  STRING; 

INTENT.  INTENTION  :«  (1  *>  READ) 

TIME  LIMIT:  DURATION  .*  NO  DELAY) 

is 

begin 

null;  --  should  bs  dsflaad  by  lspiaasator 
end  open; 


procedure  open  (node  . 

BASE: 

KEY: 

RELATION : 
INTENT: 

TIME  LIMIT: 

is 


in  out  NODE_TYPE; 

NODE  TYPE; 

RELATIONSHIP  JCEY’; 

RELATION_NAME  :*  DEFAULT _R£LATI0N; 
INTENTION  :=  (1  ->  READ)' 

DURATION  ;=  NOJJELAT) 


begin 

null;  —  fhoaid  b*  dsflasd  by  laplaaantor 
end  OPEN; 
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HDST_FILE  NAME : 
procedure  export  (node  7 

HOSTF I LENAME : 
procedure  export  (NAME: 

HOSTFILENAME: 

end  FIL£_IMPORT_EXPORT: 

end  cats: 
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use  I0_DEFINITI0NS; 
type  TAPE_P0SITI0N  is 

(BEGINNINGOF  TAPE.  PHYSICAL  END  0F_TAPE. 

TAFE_NARk7  "  OTHER); 

subtype  volume_string  is  string  (i  . .  a)  ; 

subtype  file  string  is  string  (1  ..  17) ; 

subtype  reel_name  is  STRING; 

subtype  file_type  is  cais.io_definitions.file_type; 

subtype  label_string  is  string  (1...8O); 

procedure  mount  (tape_drive :  FILE_TTPE ; 

TAPE~  NAME :  REEL~ NAME; 

DENSITY;  POSITIVE) ; 

procedure  lqadjjnlabeled (Tape_drive :  file_type; 

DENSITY:  POSITIVE; 

BL0CK_SIZE :  POSITIVE) ; 

procedure  initialize  unlabeled Ttape_drive :  file  type; 

DENSITY:  POSITIVE; 

BLOCKS I ZE:  POSITIVE); 

procedure  load  labeled (tape_drive :  file  type; 

V0LUME_IDENTIFIER:  VOLUME_STRING; 
DENSITY:  POSITIVE; 

BLOCKSIZE:  POSITIVE); 

procedure  initiali ze_labeled (tapedrive :  file  type; 

VOLUMEIDENTIFIER:  VOLUMESTRING; 
DENSITY:  POSITIVE: 

BLOCKSIZE:  POSITIVE; 

ACCESSIBILITY:  CHARACTER  :»•  •); 

procedure  UNLOAD  (TAPEDRIVE:  FILETYPE): 

procedure  dismount (tape_drive:  file  type)  ; 

function  IS_LOADED (TAPE  DRIVE ;  FILE  TYPE) 

return  boolean; 

function  IS_MOUNTED (TAPE_DRIVE :  FILE  TYPE) 
return  BOOLEAN; 

function  TAPE_STATUS (TAPE  DRIVE :  FILE  TYPE) 
return  tape  position; 

procedure  Ren Ind  tape (tape_dr ive :  file  type); 
procedure  SKIPJTAPEMARKS (TAPEDRIVE :  FILE_TYPE; 

NUMBER:  INTEGER  :=1; 

TAPESTATE :  out  TAPE  POSITION)  ; 

procedure  nritetape  mark  (tape  drive:  file  type: 

HUMEER:  POSITIVE  :=1; 

TAPE  STATE:  out  TAPE  POSITION)  ; 

procedure  volume  header (tape  drive :  filejype; 

VOLUME  IDENTIFIER:  VOLUME_STRING ; 
ACCESSIBILITY:  CHARACTER  :=•  ’) ; 

procedure  file_header(tape_drive:  filejype; 

FILE- IDENTIFIER :  FILE- STRING; 
EXPIRATIONDATE:  STRING  :=*  993*8*; 
ACCESSIBILITY:  CHARACTER  :*•  '); 

procedure  end_file_labelctape_drive:  FILE_TYPE) : 
procedure  read__lab£l (tape_drive :  filejype; 

LABEL :  Out  LABEL  STRING)  : 


end  MAGNETIC  JAPE; 

package  fil£_import_export  la 

use  NODEJEFINITIONS; 

procedure  import(node:  node  type; 

HOST  FILE  NAME:  STRING); 

procedure  import  (name7  name  string. 
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ALPHABET! CS) ; 
type  ARFA_VALUE  is 

(NO  FILL,  FILL_»ITH_ZEROES, 

FILL_SITH_SPACES) ;” 

type  FORM_TYPE  (ROW POSITIVE; 

COLUMN ;  POSITIVE; 

AREA_(JUALIFIER_REQUIRES_SPACE :  BOOLEAN)  IS  private; 

aubtype  PR  I  ntable_character  ia  character  range  •  • 


function  maximum_function_key 

(TERMINAL.  FILEJYPE)  return  NATURAL; 
function  maximum  function  key  return  natural; 
procedure  define_qualified_area 

(FORM:  in  out  FORM  TYPE; 

INTENSITY:  AREa”_INTENSITY  :=  NORMAL; 

PROTECTION:  AREA~PROTECTI ON  :=  PROTECTED; 

INPUT:  AREA~INPUT  :=  GRAPHICCHARACTERS ; 

VALUE:  AREA~VALUE  :=  N0_FIU.7; 

procedure  remove_area_oualifier(form:  in  out  form  type)  ; 
procedure  set_position(form:  in  out  form  type” 

POSITION:  POSITION_TYPE) ; 

procedure  next_qualified_area(FORM:  in  out  form'type. 

COUNT:  POSITIVE  :=  1); 

procedure  put  (form:  in  out  formjptpe; 

ITEM:  PRINT ABLE  CHARACTER)  ; 

procedure  put  (form:  in  out  form  type; 

ITEM:  STRING); 

procedure  erase_area(FORM.  in  out  formtype)  ; 
procedure  erase ^FORM (FORM.  in  out  FORM  TYPE)  ; 
procedure  ACTIVATE  (TERMINAL:  FILE_TYPE; 

FORM:  in  out  FORM  TYPE); 

procedure  GET  (FORM,  in  out  FORM  TYPE; 

ITEM:  OUt  PRINTABLECHARACTER) ; 

procedure  GET  (FORM:  in  out  FORM  TYPE; 

ITEM :  OUt  STRING) ; 

function  is_form_updated (form :  form  type)  return  boolean; 
function  termination_key(fqrm:  form  type)  return  natural; 
function  form_size(form:  form  type)  return  position  type; 
function  terminal  size (terminal:  file  type)  return  position  type; 
function  terminal’size  return  position  type; 
function  aaea_5Ualifier_reijuires_space 

(form:  form_type)  return  BOOLEAN; 
function  area  gualifier  rebuires  space 

(TERMINAL:  FILE_TYPeI  return  BOOLEAN; 

function  area  bualifier  requires  space  return  boolean; 


private 

type  FORMJYPE  (ROM :  POSITIVE; 

COLUMN:  POSITIVE; 

AREA_GUALIFIER_REQUIRES_SPACE :  BOOLEAN)  is 

record 

nail;  —  ihould  b«  d«fin#d  by  lspl«s«ntor 
end  record; 

end  FORM  TERMINAL; 


package  kagnetictape  is 
use  NODE _DEF IN ITI ONS ; 
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procedure  get  (item:  out  string; 

LAST:  out  NATURAL; 

KEYS:  OUt  FUNCTION_KEY_DESCRIPTOR)  ; 
function  FUNCTIQN_KEY_COUNT (KEYS :  ~FUNCTION_KEY_DESCRIPTOR) 

return  natural" 

procedure  FUNCTION_KEY(KEYS:  FUNCTION_KEY_DESCRIPTOR ; 

INDEX:  POSITIVE. 

KEY_ IDENTIFIER :  Out  POSITIVE; 

POSITION:  OUt  NATURAL). 

procedure  function_key_name  (terminal  :  file_type. 

KEY_IDENTIFIER :  POSITIVE. 

KEYJIAME:  OUt  STRING; 

LAST:  OUt  POSITIVE); 

procedure  FUNCTION_KEY_NAME(KEY_IDENTIFIER:  POSITIVE; 

KEY  NAME:  out  STRING; 

LAST:  out  POSITIVE)  ; 

procedure  delete_character (terminal:  file_type; 

COUNT:  POSITIVE  :=  1); 

procedure  delete_character(count:  positive  .-=  1); 
procedure  delete'line (terminal:  file_type; 

COUNT:  POSITIVE  :=1); 

procedure  DELETE_LINE (COUNT:  POSITIVE  :  =  l); 
procedure  erasecharacteroerminal:  FILE  TYPE; 

COUNT:  POSITIVE  :=  1); 

procedure  ERASECHARACTER (COUNT :  POSITIVE  :=  l); 
procedure  ERASEINDI  SPLAY  (TERMINAL:  FILETYPE; 

SELECTION:  SELECT_ENUMERATION)  ; 
procedure  ERASE_IN_DISPLAY  (SELECTION:  SELECT  ENUMERATION)  ; 
procedure  erase_in“line (terminal:  file  type; 

SELECTION:  SELECTENUMERATION); 

procedure  ERASE_INJ-INE (SELECTION:  SELECT  ENUMERATION)  ; 
procedure  INSERTSPACE (TERMINAL:  FILE  TYPE; 

COUNT:  POSITIVE  :=  1); 

procedure  INSERT_SPACE(COUNT:  POSITIVE  :=  1); 
procedure  insert'line (terminal:  file  type; 

COUNT:  POSITIVE  :s  l) ; 

procedure  insertline  (count:  positive  :=  i); 
function  GRAPH  I  C_REND  ITI  ON_SUPPORT 
(TERMINAL:  FILE_TYPE; 

RENDITION:  GRAPHIC_RENDITION_ARRAY) 
return  boolean, 

function  graphic_rendition_support 

(RENDITION:  GRAPHICRENDITIONARRAY) 
return  boolean; 

procedure  select  graphic  rendition 

(TERmInAL:  FILETYPE; 

RENDITION:  GRAPHIC_RENDITION_ARRAY  :* 

DEFAULT~GRAPHIC_RENDITION) ; 

procedure  select_graphic_rendition 

(RENDITION:  GRAPHIC_R£NDITION_ARRAY  :» 

DEFAULT~GRAPHIC_RENDITION) ; 

end  PAGE  TERMINAL; 

package  form  terminal  ia 
use  NODE_DEFINITIONS; 
use  IO_DEFINITIONS ; 
use  IO_CONTROL ; 

•ubtype  FILE_TYPE  ia  CAIS.IO_DEFINITIONS.FILE_TYPE; 

type  AREA_ INTENSITY  ia  (NONE.  NORMAL.  HIGH); 
type  AREA_PROTECTI ON  ia  (UNPROTECTED.  PROTECTED)  ; 
type  area  input  ia 

(GRAPHIC  CHARACTERS,  NUMERICS, 
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OPEN  <  3LEJTODE,  ROLENAME.  {1  =>  EXISTENCE)); 

SET  AC  ESS'cOKTROL  (NODE.  ROLE  NODE,  GRANT); 

CLOSE  NODE) ; 

CLOSE  ROLE_NODE) ; 
except  on 
when  others  => 

CL  SE  (NODE); 

CL  SE  (ROLEJtODE)  ; 
rase; 

end  SE'  access  control; 


functi''  T  IS  GRANTED  (0BIECTJ10DE:  NCCE_TYPE; 

ACCESs'rIGHT:  NANE” STRING) 
return  boolean  ia~  separate; 

functii  n  IS_GRANTED(OBJECT_NAME:  NANE_STRING; 

accessjught.  kane'string) 
return  boolean 

is 

OBJECTNODE  :  N0DE_TfPE ; 

RESULT  :  BOOLEAN ; 

begin 

OPEN  i'iBJECT  NODE.  OBJECT  NAME.  U  =>  READ  RELATIONSHIPS)) ; 
RESULT  ;=  IS'CRANTED  <0B JECT_NODE .  ACCESS_RIGHT) ; 

CLOSE  :OBJEC?_NODE) ; 
retur-1  RESULT; 
except,  on 
when  others  => 

CL  .SE  (0BJECT_NODE)  ; 
rase; 

end  IS  GRANTED; 


procedure  adopt (role_nqde .  NODE_TYPE; 

R0LE~ KEY:  RELATIONSHIP KEY  :=  LATEST JCET) is  separate; 

procedure  UHaDCPT (R0LE_KEY :  RELATIONSHIP _key)  is  separate; 
end  ACCESS  CONTROL; 

separate  (cais) 

package  b^dy  structural^NODES  is 
use  NODE_OEFINITIONS;~ 
use  NODE  NANACEMENT; 

procedure  create_nod£ 

(NODE; 

BASE. 

KEY: 

RELATION: 

ATTRIBUTES: 

ACCESS  CONTROL; 

LEVEL.” 

procedure  create  node 

(NODE:  ”  in  out  NODE^TYPE ; 

NAME.  HAJflfsTRING , 

ATTRIBUTES:  LlST~TTPt  :=  ENPTY_LIST; 

ACCESS  CONTROL:  LIST~TYFE  :=  EMPTYJ.IST, 

LEVEL:”  LISTJYPE  :=  EMPTYJ-IST) 

is 

BASE  :  NODE_TTPE ; 
begin 

OPEN  (BASE,  BASE_PATH  (MANE), 

(I  •=>  APPEND  RELATIONSHIPS)); 


in  OUt  NODE  TYPE; 

node"  TYPE; 

RELATIONSHIP JCEY  LATEST_KEY; 
RELATION  NAME  =  DEFAULT  RELATION; 
LIST_TYPE  :=  EMPTY_IIST; " 

LIST~TYPE  •.»  EMPTY  "list  . 

LISt'type  :*  EMPTY_LIST)  is  separate; 
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CR£ATE_NODE 

(MODE,  BASE.  LASTKEY  (NAME)  .  LAST  RELATION  (NAME)  , 
ATTRIBUTES,  ACCESS  J^INTROL .  LEVEL)"; 

CLOSE  (BASE) ; 
exception 
when  other*  => 


CLOSE  (NODE) ; 
CLOSE  (BASE) : 

raise; 

end  CREATE  NODE; 


procedure  create_node 
(BASE : 

KEY: 

RELATION; 

ATTRIBUTES: 

ACCESS_CONTROL: 

LEVEL:- 

is 

NODE  :  NODE  TYPE; 


NODE_TYPE; 

RELATIONSHIPJCEY  :=  LATESTJCEY; 
RELATION  NAME  :=  DEFAULT JIELATI ON; 
LIST_TY?I  :=  EMPTY_LIST  ~ 
LISTJOPE  :=  EMPTY~LIST; 

LIST~TYPE  :=  EMPTY~LIST) 


begin 

CREATE_NODE 

(NODE.  KEY.  RELATION,  ATTRIBUTES.  ACCESS  CONTROL. 


LEVEL) ; 
CLOSE  (NOD") ; 
end  CREATE  NODE; 


procedure  create  node 
(NAME: 
ATTRIBUTES: 
ACCESSCONTROL : 
LEVEL 
is 


NAME  STRING; 

LIST~TYPE  :=  EMPTY  J.IST; 
LIST  TYPE  :=  EMPTY  LIST: 
LIST-TYPE  :*  EMPTY~LIST) 


NODE  :  NODE  TYPE; 
begin 
create_node 

(NODE.  NAME.  ATTRIBUTES,  ACCESSCONTROL .  LEVEL): 
CLOSE  (NODE) ; 
end  CREATE  NODE; 
end  STRUCTURAL  NODES; 


separate  (CAIS) 

package  body  process  control  is 

USe  NODEDEFINITIONS; 
use  PROCESS_DEFINITI0NS; 
use  NODE  MANAGEMENT; 


procedure  spavn_process 
(NODE: 

FILE_N0DE : 

INPUT  PARAMETERS: 
KEY: 

RELATION: 
ACCESS_CONTROL : 
LEVEL:' 
ATTRIBUTES: 

INPUT  FILE: 

OUTPUT  _FIL£ : 

ERROR  FILE. 
ENVIRONMENT  NODE: 


in  out  NODE  TYPE; 

NODE”  TYPE; 

PARAMETER_LI ST  :=  EMPTY_LIST ; 

RELATIONSHIP  JCEY  .=  LATESTJCEY ; 

RELATION  NAME  :=  DEFAULT_RELATION ; 
LIST_TYPE  =  EMPTY  LIST; 

LIST-TYPE  :=  EMPTY-LIST; 

LISTJTYPE  :=  EMPTY-LIST; 

NAME "STRING  :=  CJRRENT_ INPUT; 

NAME  STRING  :=  CURRENT-OUTPUT ; 

NAME-STRING  :=  CURRENT'eRROR : 

name  "string  -  current^node)  i*  separate; 


procedure  a*ait_process_completion 

(NODE:  "  "  NODE  TYPE; 
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TIME_LIMIT:  DURATION  :  =  DURATION ‘LAST) 

ia  separate; 


procedure  await_process_completion 

(NODE:  “  “  NODE_TYPE; 

R£SULTS_RETURNED:  in  out  RESULTS_LIST; 

STATUS:"  out  PROCESS  STATUS; 

TIME_LIMIT:  DURATION  :=  DURATION '  LAST) 

is 

begin 

AWAIT_PROCESS_COMPLETION  (NODE.  TINE  LIMIT); 

GET_RESULTS  (NODE,  RESULTS_R£TURNED)7 
STATUS  :=  STATUS_OF_PROCESS  (NODE); 
end  AWAIT  PROCESS  COMPLETION: 


procedure  invdke_process 

(node  :  in  out 

FIL£_NODE : 

RESULTS _R£TURNED:  in  Out 
STATUS :  Out 

INPUT_PARAMETERS : 

KEY: 

RELATION: 

ACCESS_CONTROL : 

LEVEL 

ATTRIBUTES : 

INPUT  FILE: 

OUTPUT_FILE : 

ERRORFILE : 

ENVIRONMENT  NODE: 

TIME  LIMIT :" 


HODE_TYPE; 

NODE*  TYPE; 

RESULTS_LIST; 

PROCESS-STATUS ; 

PARAMETER_LIST: 

RELATIQNSHIP_KEY  :=  LATEST JCEY; 
RELATI ON_NAME  :=  DEFAULT_RELATION ; 
LIST_TYP£  :=  EMPTYLIST; 

LISTJTYPE  :*  EMPTY^LIST; 

LIST^TYPE  =  EMPTY  J.IST; 
NAME^STRING  :=  CURRENT_ INPUT; 

NAME  STRING  :=  CURRENT  OUTPUT ; 
NAMESTRING  :=  CURRENTERROR ; 
NAMESTRING  :=  CURRENTNODE ; 
DURATION  : = 

DURATION 'LAST)  is  separate; 


procedure  CREATE  JOB 
(FILE  NODE :~ 
INPUTPARAMETERS : 
KEY. 

ACCESSCONTROL: 

LEVEL: 

ATTRIBUTES: 

INPUT^FILE: 

OUTPUT  FILE: 
ERROR_FILE: 
ENVIRONMENT  NODE: 


NODE  TYPE; 

PARAMETER  LIST  :=  EMPTYLIST; 
RELATIONSHIP  KEY  :=  LATEST  KEY; 
LIST_TYPE  :=_EMPrr_LIST; 
LIST_TYPE  :=  EMPTYLIST; 
LISTJYPE  :=  EMPTY  LIST; 
NAMESTRING  :*  CURRENTINPUT; 
NAME  STRING  :=  CURRENT  JJUTPUT; 
NAME  STRING  :»  CURRENT'eRRCR  ; 
NAMESTRING  :=  CURRENT JJSER) 
ia  separate; 


procedure  APPEND_RESULTS (RESULTS :  RESULTS  STRING) 

ia  separate; 


procedure  write  results (results:  results  string)  ia  separate; 


procedure  get_resultscnode: 

RESULTS: 


NODEJYPE; 

in  out  RESULTS  LIST) 

ia  separate; 


procedure  get_results (node  : 

RESULTS :  in  OUt 


STATUS :  Out 

ia 

begin 

GET  RESULTS  (NODE.  RESULTS); 

STATUS  :=  STATUS_OF_PROCESS  (NODE); 
end  GET  RESULTS ;  ” 


NODE_TYPE; 
RESULTS_LIST; 
PROCESS "STATUS) 


261 


PROPOED  MIUSTD-CAIS 
31  JAM  ARY  i®s* 


procedure  get_results (rare  rare  string; 

RESULTS:  in  out  RESULTS  LIST; 
jB  STATUS.  OUt  PROCESs'sTATUS) 

RODE  :  RODE  TYPE. 
begin 

OPEN  (RODE.  RARE .  U  r>  R£aD  ATTRIBUTES)) 

G£T_RESULTS  (RODE.  RESULTS};' 

STATUS  : *  STATUS  OF  PROCESS  (NODE) • 

CLOSE  (NODE) ; 
exception 
when  others  => 

CLOSE  (RODE) ; 
raise; 

end  GET_RESULTS; 


procedure  cet_re5ults (rare .  nake_strihg; 

■m  RESULTS:  in  out  RESULTS^LIST) 

RODE  :  NODE  TYPE; 
begin 

OPEN  (RODE.  NAME.  (1  =>  READ  ATTRIBUTES) ) ; 

GET_R£SULTS  (RODE,  RESULTS);' 

CLOSE  (RODE) ; 

exception 
when  others  => 

CLOSE  (RODE); 

raise; 

end  GET  RESULTS; 

procedure  get  parareters 

(pahareters:  in  out  pararete»_list)  is  separate; 

procedure  abort_process(Rode:  rode  type. 

RESULTS:  RESUlts  strirg)  is  separate; 

procedure  abort  process  (name  :  hare  strirg; 

j,  RESULTS:  RESULTS  ^STRING) 

RODE  :  RODE  TYPE; 
begin 

CLOSE  (RODE) ; 

exception 
when  others  => 

CLOSE  (RODE) ; 
raise; 

end  ABORT_ PROCESS; 


procedure  abort_process(node:  rode  type) 
begin 

A80RT_PR0CESS  (RODE,  'ABORTED') ■ 
end  ABORT  PROCESS; 


procedure  abort_process (rare.  nare_strirg) 

RODE  :  NODE  TYPE; 
begin 


282 


PROPOSED  MIL-STD-r.nJS 
31  JAMARY  198.5 


OPEN  (NODE.  NAME.  (READ_R£LATIONSHIPS.SRITE_CONTENTS.NRITE_ATTRIBUTES)) ; 
ABORT_PROCESS  (NODE.  “ABORTED*) ; 

CLOSE" (NODE) ; 

exception 
when  others  => 

CLOSE  (NODE); 
raise: 

end  ABORT  PROCESS; 


procedure  suspend_process  ( node :  nqde_ttpe)  is  separate; 

procedure  suspend_process  (name  :  name  string) 

is 

NODE  :  NODEJTYPE; 
begin 

OPEN  (NODE.  NAME.  (READ_RELATIONSHIPS . WRITE_CONTEKTS ,NRITE_ATTRIBUTES) ) ; 
SUSPEND_PROCESS  (NODE);~ 

CLOSE  (NODE) ; 
exception 
when  others  => 

CLOSE  (NODE); 
raise; 

end  suspend  process; 


procedure  resume_PROCESS(node:  NODE_type)  is  separate; 

procedure  resumeprocess  (name :  name  string) 

is 

NODE  NODE  TYPE; 
begin 

OPEN  (NODE.  NAME,  (READ  RELATIONSHIPS. NRITE  CONTENTS , WRITE  ATTRIBUTES) )  : 
RESUME  PROCESS  (NODE); 

CLOSE  (NODE); 
exception 
when  others  -> 

CLOSE  (NODE) ; 
raise; 

end  RESUME  PROCESS; 


function  status_of_process(node:  node  type) 
return  processstatus  is  separate; 


function  status  of  process  (name  :  name_string) 
return  process  status 

is 

NODE  :  NODE_TYPE: 

result  :  proc£ss_status; 
begin 

OPEN  (NODE,  NAME.  (1  =>  READ  ATTRIBUTES) ) ; 
(RESULT  :=  STATUS  OF_PROCESS_(NODE) ; 

CLOSE  (NODE) ; 
return  result; 
exception 
when  others  => 

CLOSE  (NODE); 
raise; 

end  STATUS  OF  PROCESS; 


function  handles  open  (node  .  node_type)  return  natural 

is  separate; 
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function  handles_open (name :  namestring)  return  natural 

ia 

NODE  :  NCDE_TYPE; 

RESULT  :  NATURAL; 

begin 

OPEN  (NODE,  NAME.  (1  =>  R£AD_A7TRIBUTES) ) ; 

RESULT  :s  HANDLES _0PEN  (NODE)". 

CLOSE  (NODE) ; 

return  result; 
exception 
when  othrra  => 

CLOSE  (NODE) ; 

raise; 

end  HANDLES  OPEN; 


function  io_units (node :  node_ttpe)  return  natural  ia  separate; 

function  io_units(name:  nakestring)  return  natural 

ia 

NODE  :  NC1E_TYPE ; 

RESULT  :  NATJRAL. 

begin 

OPEN  (NODE.  NAME.  (1  =>  R£AD_ ATTRIBUTES) ) ; 

RESULT  :  =  T0_UNITS  (NODE); 

CLOSE  (NODE) . 
return  RESULT; 
exception 
when  others  => 

CLOSE  (NODE); 
raise; 

end  io  units; 


function  starttime  (node  :  node  type) 
return  tine  is  separate; 

function  ST  ART  _TINE  (NAME:  NAMESTRING) 
return  TIME 

ia 

NODE  :  N0DE_TYPE ; 

RESULT  :  TIMEl 
begin 

OPEN  (NODE.  NAME.  (1  =>  READ  ATTRIBUTES)); 
RESULT  :=  STARTJTIME  (NODE);” 

CLOSE  (NODE) ; 
return  result; 
exception 
when  others  => 

CLOSE  (NODE); 
raise; 

end  START  TIME; 


function  finish_time(node:  node_ttpe) 
return  time  is  separate; 

function  finish_time(name:  name  string) 
return  time 

is 

NODE  :  NODE  TYPE; 

RESULT  :  TIME” 
begin 

OPEN  (NODE.  NAME.  (1  =>  READ  ATTRIBUTES) ) : 
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RESULT  :  =  FINISH_TIME  (NODE); 
CLOSE  (NODE); 
return  result; 
exception 
when  others  => 

CLOSE  (NODE); 
raise; 

end  FINISH  TIME; 


function  machine_time(node;  node_type)  return  duration 

is  separate; 

t  function  machine  time  (name:  name  string)  return  duration 

[  is  " 

NODE  :  NODE_TYPE ; 

RESULT  :  DURATION; 
begin 

OPEN  (NODE.  NAME.  (1  =>  READ_ATTRIBUTES) ) ; 

RESULT  :=  MACHINE_TIME  (NODE); 

CLOSE  (NODE) ; 
return  RESULT; 
exception 
when  others  => 

CLOSE  (NODE) ; 
raise; 

end  MACHINE  TIME; 


end  PROCESS  CONTROL; 

separate  (CAIS) 
package  body  IO  CONTROL  is 
use  NODE_DEFINITIONS ; 

Use  NODEMANAGEMENT; 
use  IO_DEFINITIONS; 
use  LIST_UTILITIES; 

FILE_TYPE : 

In  Out  NODE_TYPE; 

INTENTION; 

DURATION  :=  NODELAY) 

is  separate; 

procedure  SYNCHRONIZE  (FILE:  FILE_TYPE)  is  separate; 

procedure  set  log  (file  :  file_type; 

LOG  FILE:  FILE~TYPE)  is  separate; 

|  procedure  clear_loc (file :  file_type)  is  separate; 

function  LOGGING  (FILE:  FILE_TYPE)  return  boolean  is  separate; 
function  get_log (FILE :  FILE_TY7E)  return  file_TYPE  is  separate; 

function  NUMBER_OF_EL£MENTS  (FILE :  FILE_TYPE)  return  NATURAL 

is 

RESUL"  :  NATURAL; 
begin 

—  i  ild  bs  d«fin«d  by  isplsstntor: 

i  return  RESULT; 

end  NL'v  -R_OF_ELEMENTS; 

procedu-e  SET_PROMPT (TERMINAL:  FILE_TYPE; 

"  ~  prompt:  string)  is  separate; 
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function  getprompt (terminal  :  file_type)  return  STRING 

is  separate; 


function  INTERCEPTED_CHARACTERS  (TERMINAL :  FILE_TYPE) 
return  CHaRacterjwray  ia  separate; 


procedure  enable  function  keys  (terminal. 

ENABLE; 


FILE_TYPE ; 
BOOLEAN) 
is  separate; 


function  function_keys_enabled (terminal:  file_type) 
return  Soolean  is  separate  : 


procedure  couple (queue_basE: 

QUEUE- KEY: 

QUEUE-RELA~ION : 

FILE_NODE: 

FORM? 

ATTRIBUTES: 

ACCESS_CONTROL : 

LEVEL:" 

procedure  couple  (QUEUE_name : 

FILE  NODE: 

formT 

ATTRIBUTES : 

ACCESS  CONTROL: 

LEVEL:- 

is 

BASE  :  NODE  TYPE; 
begin 

OPEN  (BASE.  BASE  PATH  (QUEUE  NAME).  (1  =>  APPENDRELATIONSHIPS) ) ; 
COUPLE 

(BASE.  LAST  KEY  (QUEUE_MAME)  , 

LASTRELATION  (QUEUE_NAME)  ,  FILENODE.  FORM. 

ATTRIBUTES,  ACCESS  CONTROL.  LEVEL); 

CLOSE  (BASE); 
exception 
when  others  => 

CLOSE  (BASE); 
raise; 

end  couple; 


NODEjnrPE ; 

RELATI ONSHIP_KEY  :=  LATEST_PCEY ; 

RELATI ON  NAME  :=  DEFAULT_RELATION ; 
NODE  TYPl; 

LIST-TYPB  :=  EMPTY_LIST; 

LIST_TYFE;  —  intentionally 

—  not  dsfanlten 

LIST  TYPE  :=  EMPTY  LIST; 

list'type  .=  empty'list)  is  separate; 

NAMESTRING : 

NODE- TYPE; 

Lisr-TYPE  :=  EMPTY  LIST; 

LI St'tYPE ; 

LIST~TYPE  :=  EMPTY  LIST; 

LIST~TYPE  :=  EMPTY- LIST) 


procedure  couple  (queue  base. 

QUEUE- KEY: 
QUEUE~RELATION : 
FILE  NAME. 

formT 

ATTRIBUTE3 : 
ACCESS  CONTROL: 
LEVEL :" 

is 


NODE_TYPE ; 

RELATI ONSHIP_KEY  :=  LATEST_KEY, 
RELATI 0N_NAME  :=  DEF AULT_RELATION ; 
NAME  STRING; 

LIST~TYPE  :=  EMPTY  LIST; 

LIST~TYPE; 

LIST-TYPE  :*  EMPTY  LIST; 

LIST" TYPE  :=  EMPTY'lIST) 


FILE_N0DE  :  NODE_TYPE ; 
begin 

OPEN  (FILEJtODE,  FILE_NAME,  (READ_ATTRIBUTES .  R£AD_CONTENTS) )  ; 
COUPLE 

(QUEUE  BASE,  QUEUEJCEY.  QUEUE  RELATION.  FILE  NODE. 

FORM. "ATTRIBUTES,  ACCESS  CONTROL.  LEVEL); 

CLOSE  (FILE_NODE) : 
exception 
when  others  => 

CLOSE  (FILE_NODE) ; 
raise; 
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end  COUPLE; 


procedure  couple  (queuejiame  : 

FILENAME : 
form” 

ATTRIBUTES: 
ACCESS  CO KTRQL : 
LEVEL:" 

la 


NAMESTRING; 

MAKE- STRING; 

LIST-TYPE  :=  EMPTY_LIST; 
LIST~TYPE ; 

LISTJTYPE  :=  EMPTY _LIST; 
LIST_TYPE  :=  EMPTY ~LIST) 


FIL£_NODE  :  NOOE_TYPE; 

QUEUE_BASE  :  N0DE~TYPE , 
begin  - 

OPEN  (QUEUE_BASE.  BASEPATH  (QUEUE  NAME),  (1  =>  APPEND_RELATIONSHIPS) )  ; 
OPEN  (FIL£_NODE,  FILE_NAME ,  (READ  ATTRIBUTES,  READ  CONTENTS)); 

COUPLE 

(QUEUE_BASE.  LAST_KEY  (QUEUE  NAME), 

LASTRELAT ION  (QUEUE_NAME) ,_FILE_NODE.  FORM. 

ATTRIBUTES ,  ACCESS_CO NTROL ,  LEVEL); 

CLOSE  (QUEUE_BASE) ; 

CLOSE  (FILE_NODE)  ; 
exception 
when  others  => 


CLOSE  (QUEUEBASE) ; 
CLOSE  (FILE_NODE) : 
raise . 

end  couple; 


end  10  CONTROL; 


separate  (cais) 
package  body  DIRECT  IO  is 
use  NODE_DEFINITIONS; 
use  IODEFINITIONS; 
use  NODE  MANAGEMENT; 


—  File  B&nigeaant 


procedure  create  (FILE: 

BASE: 

KEY: 

RELATION: 

MODE: 

FORM: 


ATTRIBUTES. 
ACCESS  CONTROL: 
LEVEL :" 


in  OUt  FILE_TYPE; 

NODE  TYPE; 

RELATIONSHIP  KEY  :=  LATEST  KEY; 
RELATI 0 N_NAME  :  =  DEFAULT  RELATION; 
FILE_M0DE  :=  INOUT  FILE;~ 
LISTJYPE  :=  EMPTY-LIST; 

LISTJTTPE  :*  EMPTY~LIST; 

LIST_TYPE  :=  EMPTY~LIST; 

LIST~TYPE  :=  EMPTY~LIST) 


begin 

null.  —  should  bs  dsfinsd  by  lsplsasntor 
end  CR'  ATE; 


procedure  create  (FILE: 

NAME: 

MODE: 

FORM: 

ATTRIBUTES: 
ACCESSCO  NTROL: 
LEVEL: 

is 

BASE  NODE  TYPE; 


in  out  FILE  TYPE; 

NAME  STRING; 
FILE-M0DE  := 
LIST_TYPE  :* 
LIST_TYPE 
LIST-TYPE  :* 
LI  ST  ~TYPE  :  = 


INOUT  FILE; 
EMPTY-LIST; 
EMPTy'lIST; 
EMPTY-LIST; 

empty”list) 
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begin 

□PEN  (BASE,  BASE  PATH  (NAME).  (1  =>  APPEND_RELATIQNSHIPS) ) ; 
CREATE  (FILE .  BASE .  LAST.  KEY  (NAME)  . 

LAST_RELATION  (NAME)",  MODE.  FORM.  ATTRIBUTES, 

ACCESS ^CONTROL .  LEVEL); 

CLOSE  (BASe7 ; 
exception 
when  others  => 

CLOSE  (FILE) ; 

CLOSE  'BASE) ; 

raise; 
end  CREATE; 


procedure  open  (FILE:  in  out  FILE_TYPE; 

NODE:  NODE_TYPE; 

MODE:  FILEJKJDE) 

is 

begin 

null;  --  mould  bs  dsflnsd  by  lsplesaator 
end  open, 

procedure  open  (file:  in  out  filejtype; 

NAME:  NAME_STRING; 

MODE:  FIL£~MODE) 

is 

NODE  :  NODE  TYPE; 
begin 

esse  mode  is 

when  IN  FILE  =>  OPEN  (NODE.  NAME.  (1  =>  READCONTENTS) ) ; 

when  OUT  FILE  ->  OPEN  (NODE.  NAME.  (1  =>  WRITE  CONTENTS)  )  ; 

when  INOUT  FILE  =>  OPEN  (NODE.  NAME.  (READ  CONTENTS .  WRITE  CONTENTS) ) 

when  APPEND  FILE  =>  raise  USEJERROR; 

end  esse: 

OPEN  (FILE.  NODE.  MODE); 

CLOSE  (NODE) ; 

exception 
when  others  => 

CLOSE  (i'ILE)  ; 

CLOSE  0TODE)  ; 

raise; 
end  open; 

procedure  close  (FILE:  in  out  FILEJTYPE) 

is 

begin 

null;  —  mould  b«  dsflnsd  by  lsplsssntor 
end  close; 

procedure  delete  (FILE:  in  out  file_type) 

is 

begin 

null;  —  should  bs  dtllnsd  by  lapisasator 
end  DELETE, 

procedure  feseT(file:  in  out  file  type; 

NODE:  FILE_MODE) 

is 

begin 

null;  —  should  bs  dsflnsd  by  lapisasator 
end  RESET; 

procedure  reset  (FILE:  in  out  file  type) 
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is 

begin 

null;  —  should  be  defined  toy  lsplesentor 
end  RESET; 

function  mode  (file:  filejtype)  return  filemode 

is 

RES'  T  :  FILE_MODE; 

begin 

—  should  be  defined  by  lsplesentor 
return  RESULT; 

end  MODE; 

function  name  (file:  filejtype)  return  strinc  is  separate; 

function  form  (FILE:  FILEJTYPE)  return  string 

is 

RESIT .T  :  STRING  (  1  ..  10); 

begin 

—  should  be  defined  by  lsplesentor 
return  RESULT; 

end  FOP.M; 

function  isopen  (file  :  file  type)  return  boolean 

is 

RESULT  :  BOOLEAN: 
begin 

--  should  be  defined  by  lsplesentor 
return  RESULT; 
end  is  open; 


—  Input,  end  output  operations 

procedure  read  (FILE.  FILEJTYPE; 

ITEM:  out  ELEMENT JTYPE; 
FROM:  POSITIVE_COUNT) 

is 

begin 

null:  —  should  be  defined  by  lsplesentor 
end  READ; 


procedure  read  (FILE: 

ITEM: 

is 


FILEJTYPE; 
out  ELEMENT  TYPE) 


begin 

null;  —  should  be  defined  by  lsplesentor 
end  RE\D; 


procedure  WRITE  (FILE:  FILEJTYPE; 

ITEM:  ELEMENT  TYPE; 

TO:  POSITIVE  COUNT) 

is 

begin 

null;  —  should  be  defined  by  lsplesentor 
end  wtite; 


procedure  write  (file  :  file  type; 

ITEM :  ELEMENT  TYPE) 

is 

begin 

null;  --  should  be  defined  by  lsplesentor 
end  WRITE; 


procedure  set_index(file:  filejtype; 
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TO:  positive_count)  ia  separate: 

function  in>ex(FILE:  file  type)  return  pcsitive  coumt  is  separate: 

function  size  (FILE:  FIL£_type)  return  count 

ia  separate; 

function  end_of_file(FILE:  file_type)  return  boolean 

ia 

RESULT  :  BOOLEAN; 
begin 

—  iBonld  b«  daflaad  by  laplaaantor 
return  result; 
end  end_of_fil£; 
end  DIRECT_I0;~ 

separate  (cais) 
package  body  sequential  io  ia 
use  NODE_DEFINITIONS ; ~ 
use  NODEMANAGEMENT; 
use  10  DEFINITIONS: 


—  Fils  aanigsasnt 


procedure  create  (file  . 

BASE: 


in  out  file  type. 

NODE  TYPE; 


ia 


KEY: 

RETJITION: 

MODE: 

FORM: 

ATTRIBUTES: 

ACCESSCONTFOL: 

LEVEL: 


RELATIONSHIP_KEY  :=  LATEST  KEY: 
RELATION  NAME  :*  DEFAULT  RELATION; 
FILE  MODE  :*  INOUT_FILE;~ 
LIST~TYPE  :=  EMPTY  LIST: 

LIST'tYPE  :  =  EMPTY  LIST; 

LISTTYPE  :=  EMPTYLIST; 

LIST~TYPE  :=  EMPTY  LIST) 


begin 

null;  --  should  ba  dsfinsd  by  lapisaentor 
end  CREATE; 


procedure  create (ft  i  s: 

kA."E: 

MODE: 

FORM: 

ATTRIBUTES: 


ACCESS_C0NTR0L : 
LEVEL: 


in  out  FILEJYPE; 

NAMESTRINO; 
FILEJCODE  : = 
LIST_TYPE  := 
LIST_TYPE  := 
LI ST ~TYPE  := 
LIST  TYPE  := 


INOUT_FILE: 
EMPTY_LIST; 
EMPTY_LIST; 
EMPTY_LIST ; 

empty'list) 


BASE  :  NODETYPE; 
begin 

OPEN  (BASE.  BASE_PATI  (NAME),  (1  =>  APPEND  RELATIONSHIPS)); 
CREATE  (FILE.  BAiE.  LAST_KEY  (NAME) , 

LAST_RELATION  ('IAME)\  MODE.  FORM,  ATTRIBUTES, 
ACCESS_CONTROL .  LEVEL); 

CLOSE  (BASE) ; 
exception 
when  others  => 


CLOSE  (FILE) ; 
CLOSE  (BASE) : 

raise; 
end  create, 


procedure  open  (file  in  out  file  TYPE; 
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MODE:  NODE  TYPE; 

MODE :  FILE_MODE) 

ia 

begin 

null;  --  should  b«  dsflnsd  by  lapisssntor 
end  open; 

procedure  open  (file:  in  out  filejtype; 

NAME:  NAMESTRING; 

NODE :  FIL£~M0DE> 

ia 

NODE  :  NODEJTYPE 

begin 

caae  node  ia 

when  IN_FILE  =>  OPEN  (NODE.  MANE.  (1  =>  READ_C0NTENTS) )  ; 
when  OUT_FILE  =>  OPEN  (NODE.  NAME,  U  =>  »RITE_CONTENTS) ) ; 
when  INOUT_FTLE  =>  OPEN  (NODE.  NAME.  (READ_CONTENTS .  NRITE_CONTENTS) )  ; 
when  APPEND_FILE  =>  OPEN  (NODE.  NAME,  (1=>"’aPPEND_C0NTENTS)’)  ; 

end  caae; 

OPEN  (FILE.  NODE.  NODE); 

CLOSE  (NODE); 
exception 
when  othera  => 

CLOSE  (FILE) : 

CLOSE  (NODE) ; 
raise; 
end  open; 

procedure  CLOSE  (FILE:  in  out  FILEJTYPE) 

ia 

begin 

null.  —  should  bs  dsflned  by  lapisssntor 
end  close; 


procedure  DELETE  (FILE:  in  out  FILE  TYPE) 

is 

begin 

null; —  should  bs  dsflnsd  by  lapisssntor 
end  DELETE; 


procedure  reset  (file:  in  out  file  type; 

MODE:  FILE  MODE) 


ta 

begin 

null;  —  should  bs  dsflnsd  by  lapisssntor 
end  RESET; 


procedure  RESET  (FILE:  in  out  FILEJTYPE) 

ia 

begin 

null:  —  should  bs  dsflnsd  by  lapisssntor 
end  REPLACE; 


function  mode  (FILE:  file  TYPE)  return  FILE  MODE 

is 

RESULT  :  FIL£_MODE; 
begin 

—  should  bs  dsflnsd  by  laplsasntor 
return  result; 
end  MODE; 

function  name(FILE:  file  type)  return  string 
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is 

RESULT  :  STRING (1 . . 10) ; 

begin 

—  should  be  defined  by  lspleaentor 
return  result; 

end  MAKE; 

function  form  (file  ;  file_ttpe)  return  string 

is 

RESULT  :  STRING (1 . .10) ; 

begin 

—  should  bs  defined  by  lspleaentor 
return  result; 

end  form; 

function  is  open  (FILE ;  FILE  TYPE)  return  boolean 

i& 

RESULT  :  BOOLEAN; 
begin 

—  should  be  defined  by  lapleaentor 
return  result; 

end  is  open; 

—  Input  end  output  operations 

procedure  read  (FILE:  FILE_TYPE; 

ITEM;  out  ELEMENT  TYPE)  is  separate. 

procedure  *RITE(FILE:  FILETYPE;  ITEM  :  EL£MENT_TYPE)  is  separate; 

function  END_OF_FILE(FILE:  FILE  TYPE)  return  BOOLEAN 

is 

RESULT  BOOLEAN; 

begin 

—  should  be  defined  by  lapleaentor 
return  result; 

end  END  OF  FILE; 
end  SE(JUENTIAL_IO ; 


separate  (cais) 
package  body  text_io  is 
use  NODEDEFINITIONS ; 
use  NODEMANAGEMENT; 
use  I0_DEFINITI0NS; 

—  File  Manageaent 


procedure  create  (file: 

BASE: 

KEY: 

RELATION: 

MODE: 

FORM: 

ATTRIBUTES: 
ACCESS_CONTROL : 
LEVEL : 


in  out  FILE  TYPE; 

N0DE_TYPE ; 

RELATI  0NSHIP_KEY  :=  LATEST_KEY; 
RELATI0N_NAME  -  DEF AULT_RELATI ON ; 
FILE_M0DF  :=  IN0UT_FILE; 

LIST~TYPE  :=  EMPTY~LIST. 

LIST  TYPE  :=  EMPTIEST; 

LISt'tYPE  :=  EMPTY_LIST ; 

LIST "TYPE  :=  EMPTY~LIST) 
is  separate; 


procedure  create  (file: 

NAME: 

MODE: 

FORM: 

ATTRIBUTES 


in  out  FILE  TYPE; 

NAMESTRING, 
FILE  MODE  = 
LIST~TYPE  = 
LIST "TYPE  = 


IN0UT_FILE 
EMPTYLIST 
EMPTY  LIST 
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ACCESS  CONTROL :  LIST_TYPE  :=  EMPTYLIST; 

LEVEL.”  LIST~TYPE  :=  EMPTY_LIST> 

is 

BASE  :  NODE_TYPE; 
begin 

OPEN  (BASE.  BASEPATH  (NAME).  (1  =>  APPEND_RELATIONSHIPS) ) : 

CREATE  (FILE,  BASE,  LAST  KEY  (NAME). 

LAST_RELATION  (NAME).  MODE.  FORM.  ATTRIBUTES. 

ACCESS  CONTROL.  LEVEL); 

CLOSE  (BASE); 
exception 
when  others  => 

CLOSE  (FILE) ; 

CLOSE  (BASE); 
raise; 

end  CREATE; 


procedure  open(filE;  in  out  file  type; 

NODE:  NODE_TYPE; 

MODE:  file_mode)  is  separate; 

procedure  open  (file:  in  out  file  type; 

NAME:  NAMESTRING; 

MODE :  FILEMODE) 

is 

NODE  :  NOEE_TYPE; 
begin 

case  node  is 

when  IN  FILE  =>  OPEN  (NODE.  NAME.  (1  =>  READ  CONTENTS) )  ; 
when  OUT_FIL£  =>  OPEN  (NODE,  NAME.  (I  =>  WRITECONTENTS) )  ; 
when  INOUT_FILE  => 

OPEN  (NODE .“name.  (READ_CONTENTS .  WRITE  CONTENTS) )  ; 

when  APPEND  FILE  =>  OPEN  (NODE.  NAME.  (1  =>  APPEND  CONTENTS) )  ; 
end  case; 

OPEN  (FILE.  NODE.  MODE); 

CLOSE  (NODE); 
exception 
when  others  => 

CLOSE  (FILE); 

CLOSE  (NODE) ; 

raise 
end  open; 

procedure  close  (file;  in  out  file_type) 

is 

begin 

null;  —  mould  be  defined  67  lsplaaaator 
end  CLOSE; 

procedure  delete  (file;  in  out  file_type)  is  separate; 
procedure  reset  (file;  in  out  file_type; 

MODE :  FILE_MODE) 

is 

begin 

null;  —  mould  t>«  dtflmd  by  lspltsantor 
end  RESET; 

procedure  reset  (FILE:  in  out  filejtype) 

is 
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begin 

null;  —  mould  be  defined  by  lapleaentor 
end  reset; 

function  mode  (file:  file_ttpe)  return  file_node  la  separate ; 

function  rake  (file:  file_type)  return  string 

ia 

RESULT:  STRING (1 . . 10) ; 
begin 

— mould  be  difiaad  by  lapleaentor 
return  result; 
end  RAKE; 

function  fojukfile:  file_type)  return  strimg  is  separate; 

function  is_oper  (file  :  file_type)  return  boolean 

ia 

RESULT  :  BOOLEAN; 
begin 

—  mould  be  defined  by  lapleaentor 
return  result; 
end  ISJJPEN; 

—  CoBtroi  of  default  input  sad  output  flits 
procedure  S£T_input(FILE:  fILE_TYPE)  is  separate; 
procedure  SET_0UTPUT(FIL£:  FIL£_TYPE)  is  separate; 
procedure  SETERROR (FILE:  FILE_TTPE)  is  separate; 
function  standard  input  return  FILE_ttpe  is  separate: 
function  stahdardjjutput  return  file_ttpe  is  separate; 
function  standarderror  return  FILE_TTPE  is  separate; 
function  current_input  return  file_TT?e  is  separate; 
function  cura£Ht_output  return  file_ttpe  is  separate; 
function  curreht_error  return  file_ttpe  ia  separate; 


Specification  of  llat  sad  page  lengths 


procedure  srr_LiRi_  length  (FILE: 


FILE  TYPE; 
COURT) 


begin 

null.  —  tfiouid  ae  defined  by  lsplesentor 
end  SET  LINE  LENGTH. 


procedure  set  line  lengthcto:  COURT) 

is 

begin 

null.  --  mould  be  defined  by  lspleaeator 
end  SET_LINE_L£NGTH; 


procedure  setpagelencttuhle:  file_type; 

TO:  COURT) 
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ia 

begin 

null;  —  abould  bo  daflnad  by  laplaaantor 
end  SET_PAGE_LENGTH; 

procedure  set_Page_length (Td  :  count) 

ia 

begin 

null;  —  mould  b«  daflnad  by  laplaaantor 
end  SET_PAGE_LENCTH; 

function  line_L£NGTH(file:  file_ttpe)  return  count 

ia 

RESULT  :  COUNT; 
begin 

—  mould  ba  daflnad  by  laplaaantor 
return  line_length; 

end  LINE_LENGTH; 

function  line  length  return  count 

ia 

RESULT  :  COUNT; 
begin 

—  abould  ba  daflnad  by  laplaaantor 
return  RESULT; 

end  LINE  LENGTH; 

function  pagelength  (file:  file  ttpe)  return  count 

ia 

RESULT  :  COUNT; 
begin 

—  abould  ba  daflnad  by  laplaaantor 
return  RESULT; 

end  PAGE  LENGTH; 

function  page_length  return  count 

ia 

RESULT  :  COUNT; 

begin 

—  abould  ba  daflnad  by  laplaaantor 
return  result; 

end  page  length; 


—  Co loan.  Lina  and  Pago  Control 

procedure  nen  linecfile:  file  ttpe; 

SPACING:  POSITIVE  COUNT  :=  1) 

ia 

begin 

null;  —  abould  ba  daflnad  by  laplaaantor 
end  NEV  LINE; 

procedure  new  line  (spacing:  positive  count  =  1) 

is 

begin 

null;  —  abould  bo  daflnad  by  laplaaantor 
end  NEW  LINE; 

procedure  skip_line(file:  file_ttpe: 

SPACING:  P0SITIVE_C0UNT  :*  1) 

ia 

begin 

null;  —  abould  ba  daflnad  by  laplaaantor 
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end  sxip  lime; 

procedure  skip_line (spacing :  positive_count  :=  1) 

is 

begin 

null;  —  should  be  daflnad  by  lsplssantor 
end  SXIP  LINE; 

function  end_of_line  (file  :  file  type)  return  boolean 

is 

RESULT  :  BOOLEAN; 
begin 

—  sboold  bs  defined  by  lsplassntor 
return  RESULT; 

end  END_OF_LINE; 

function  end_of_line  return  boolean 

is 

RESULT  :  BOOLEAN; 
begin 

—  should  ba  daflnad  by  lsplassntor 
return  RESULT; 

end  END_OF_LINE; 

procedure  nes_page (file :  filejype) 

is 

begin 

null:  —  sboold  ba  daflnad  by  lsplassntor 
end  NEW_PAGE; 

procedure  newpage 

is 

begin 

null;  —  should  ba  daflnad  by  lsplassntor 
end  NEW  PAGE; 

procedure  skip_page(FILE:  FILE_TY?e) 

is 

begin 

null;  —  sboold  ba  daflnad  by  lsplssantor 
end  skippage; 

procedure  skippage 

is 

begin 

null;  —  should  bs  daflnad  by  lsplassntor 
end  SKIP  PAGE; 

function  end_of_page(file:  file_type>  return  boolean 

is 

RESULT  :  BOOLEAN: 
begin 

—  should  ba  daflnad  by  lsplassntor 
return  result; 

end  END_OF_PAGE ; 

function  ens_of_page  return  boolean 

is 

RESULT  :  BOOLEAN; 
begin 

—  should  ba  daflnad  by  lsplssantor 
return  result; 

end  END  OF  PAGE; 
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function  end_of_file  (pile :  file_Type)  return  boolean 

is 

RESULT  :  BOOLEAN: 
begin 

—  should  bs  dsflnsd  by  Ispltssntor 
return  result; 

end  end_of_file; 

function  end_of_file  return  boolean 

is 

RESULT  :  BOOLEAN: 
begin 

—  should  bs  dsflnsd  by  lsplsssntor 
return  end_of_file; 

end  end  of  file; 


procedure  set  col  (file:  filejptpe; 

TO :  POSITTVE_COUNT) 

is 

begin 

null:  —  should  bs  dsflnsd  by  lsplsssntor 
end  SET_COL; 

procedure  set_col  (to :  positcvejmunt) 

is 

begin 

null:  —  should  bs  dsflnsd  by  lsplsssntor 
end  set  col; 


proced  ire  SET_LINE (FILE : 


FILE  TYPE: 
POSITIVE  COUNT) 


begin 

null;  --  should  bs  dsflnsd  by  lsplsssntor 
end  sr  LINE; 


procedure  set_line(to:  posittve_count) 

is 

begin 

null:  -  should  bs  dsflnsd  by  lsplsssntor 
end  SI  LINE: 


functi'  i  col  (FILE:  FILEJTPE)  return  POSITIVE_COUNT 

is 

RET  -T  :  POSITIVE_COUNT; 
begin 

—  she  id  bs  dsflnsd  by  lsplsssntor 
re«  irn  result; 

end  Ct  : 

function  col  return  positive  count 

is 

RESULT  ;  POSITIVE _COUNT; 

begin 

—  should  bs  dsflnsd  by  lsplsssntor 
ret  irn  result; 

end  col; 

function  line  (FILE:  filejtpe)  return  positive_count 

is 

RESULT  :  POSITIVE_COUNT; 

begin 
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—  should  ba  daflnad  by  laplaaantor 

return  result; 

end  LINE; 

function  line  return  positive  count 

is 

RESULT  ;  POSITIVE_COUNT; 

begin 

—  should  ba  daflnad  by  laplasantor 

return  result; 

end  LINE; 

function  pace  (FILE:  filejptpe)  return  POsmvE_couNT 

is 

RESULT  :  POSITIVE_COUNT; 
begin 

—  ahould  ba  daflnad  by  laplaaantor 

return  RESULT; 

end  PAGE; 

function  pace  return  positive  count 

is 

RESULT  :  POSITIVE_COUNT; 
begin 

—  should  ba  daflnad  by  laplaaantor 

return  RESULT; 

PAGE; 
end  PAGE; 


—  Character  rnpat-Oucput 

procedure  CTCFILE:  FILE  TYPE; 

ITEM :  out  CHARACTER) 

is 

begin 

null;  —  ahr  iid  ba  daflnad  by  laplaaantor 
end  GET; 

procedure  get  (ITEM:  out  character) 

is 

begin 

null;  —  ahould  ba  daflnad  by  lsplassntor 
end  GET; 

procedure  put  (FILE:  filejtpe; 

I TEN:  CHARACTER) 

is 

begin 

null;  —  ahould  ba  daflnad  by  laplaaantor 
end  PUT; 

procedure  put(iten:  character) 

is 

begin 

null;  —  ahould  ba  daflnad  by  laplaaantor 
end  PUT; 


—  String  Input-Output 
procedure  GET  (FILE:  FILE_TTPE; 
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ITEM:  OUt  STRING) 

is 

begin 

null.  --  should  b*  dsfinsd  by  lspisssntor 

end  clt  ; 

procedure  getcitem:  out  string) 

is 

begin 

null;  —  should  bs  dsfinsd  by  lspisssntor 
end  GET; 

procedure  PUT  (FILE:  FILEJPTPE; 

ITEM :  STRING) 

is 

begin 

null;  —  should  bs  dsfinsd  by  lspisssntor 
end  put; 

procedure  putcitem:  string) 

is 

begin 

null;  —  should  bs  dsfinsd  by  lspisssntor 
end  put; 

procedure  get  lineCFILE:  file  ttpe; 

ITEM:  OUt  STRING; 

LAST:  OUt  NATURAL) 

is 

begin 

null;  —  should  bs  dsfinsd  by  lspisssntor 

end  GETLINE; 

procedure  get_linE(item:  out  STRING: 

LAST:  OUt  NATURAL) 

is 

begin 

null;  —  should  bs  dsfinsd  by  lspisssntor 
end  GET  LINE; 

procedure  PUT  LINECFILE:  FILE_TYPE;  ITEM:  STRING) 

is 

begin 

null;  —  should  bs  dsfinsd  by  lspisssntor 
end  PUTLINE; 

procedure  put_line(item:  string) 

is 

begin 

null;  —  should  bs  dsfinsd  by  lspisssntor 
end  PUT  LINE; 

—  gsnsrle  packsgs  for  Input-Output  of  Intsgsr  Typss 

psckr^e  body  integer  io  is  separate; 

—  gsn-'ie  packsgs  for  Input-Output  of  Floating  Point  Typss 

package  body  float_io  Is  separate: 

—  gtr-  ric  packAft  for  Input-Output  of  Fiztd  Point  Typuo 
package  body  fixed_io  is  separate; 

—  gsnsrle  paekags  for  Input-Output  of  Enussratlon  Typss 
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package  body  enumeration_io  la  separate; 
end  text  io; 


separate  (CAIS) 

package  body  scroll_terminal  Is 
use  N0D£_DEFINITI0NS ; 
use  MODE 'MANAGEMENT; 
use  I0_DEFINITI0NS; 
use  TEXT_X0; 

procedure  SET_POSITION (TERMINAL:  FILE  TYPE: 

POSITION:  POSITION_TYPE) 

is 

begin 

null;  —  should  b«  dsflnsd  by  lsplessntor 
end  SET_POSITION ; 

procedure  set_pcsition  (position  ;  position_type) 

is 

begin 

SET_P0SITICN  (CURRENTJJUTPUT.  position); 
end  SET  POSITION; 


function  g exposition  (terminal:  file_type) 
return  position  type 

is 

RESULT  :  POSITIONTYPE; 

begin 

—  should  ba  dsflnsd  by  lsplsssntor 
return  result; 
end  get_position; 

function  get  position  return  POSITION  TYPE 

is 

begin 

return  get  position  (current  output)  ; 
end  GET  POSITION; 


function  terminal_size (terminal:  file_type) 
return  pos:tion_type 

is 

RESULT  :  POSITION_TYPE ; 

begin 

—  should  bs  dsflnsd  by  lsplsssntor 
return  RESULT; 
end  TERMINAL  SIZE; 

function  terminal_size  return  position_type 

is 

begin 

return  terminal_size  (current_output)  ; 
end  terminal  size; 


procedure  SET_TAB (TERMINAL.  FILE  TYPE; 

KIND:  TAB_ENUMERATION  :=  HORIZONTAL) 

is 

begin 

--  should  ba  dsflnsd  by  lsplsssntor  , 

null; 
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end  SET_TAB; 

procedure  set_tab(kind:  taberuweratior  =  horizontal) 

is 

begin 

SET_TAB  (CURRENT_OUTPUT ,  KIND); 

end  ”set_tab  ; 


procedure  clear_tab (terminal:  file  type; 

KIND:  TAB_ENUMERATTON  :=  HORIZONTAL) 

is 

begin 

—  should  ba  daflnad  by  laplesantor 
null; 

end  CLEAR  TAB; 

procedure  clear_tab(kind:  tab_erumeration  :  =  horizontal) 

is 

begin 

CLEAR  _TAB  (CURR£NT_OUTPUT .  KIND)  ; 
end  CLEAR  TAB; 


procedure  tab  (terminal  .  FILE_TYPE ; 

KIND:  TAB  ENUMERATION  :=  HORIZONTAL; 

COURT:  POSITIVE  =1) 

is 

begin 

—  should  ba  defined  by  laplesantor 
null 

end  TAB; 

procedure  TAB  (KIND:  TAB_ENUMERATIOR  :=  HORIZONTAL; 

COURT:  POSITIVE  :=  1) 

is 

begin 

TAB  (CURRERTOUTPUT,  KIND.  COURT); 
end  tab. 


procedure  BELL  (TERMINAL:  FILE  TYPE) 

is 

begin 

—  should  be  defined  by  lapleaent or 
null; 

end  BELL; 

procedure  BELL 

is 

begin 

BELL  (CURRENTJJUTPUT)  ; 
end  BELL; 

procedure  put  (terminal  file_type; 

ITEM :  CHARACTER) 

is 

begin 

--  should  ba  daflnad  by  lspleaentor 
null; 
end  PUT; 

procedure  put  (item  character) 

is 
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begin 

PUT  (CURR£NT_OUTPUT,  ITEM); 
end  put. 


procedure  rur (TERMINAL:  FILE_TrPE;  ITEM  :  SIRING) 

is 

begin 

for  INDEX  in  ITEM  'FIRST  ..  ITEM ‘LAST  loop 
PUT  (TERMINAL,  ITEM  (INDEX)): 
end  loop: 
end  PUT; 


procedure  PirrdTEM:  string) 

is 

begin 

PUT  (CURR£NT_OUTPUT ,  ITEM); 
end  PUT; 


procedure  SET  ECHO (TERMINAL:  FILE  TTPE; 

TO:  BOOLEAN  :=  TRUE) 

is 

begin 

—  should  t>«  dsflnsd  by  lsplessntor 
null: 

end  SET_ECHO; 

procedure  SET_ECHO  (TO :  BOOLEAN  :=  TRUE) 

is 

begin 

SET  ECHO  (CURRENT  INPUT.  TO)  ; 
end  SET  ECHO, 


function  echo  (terminal;  FILE  TTPE)  return  boolean 

is  separate; 


function  echo  return  boolean 

is 

begin 

return  Ecvr  (current_input)  ; 
end  echo; 


function  MATIMUM_FUNCTION_KET (TERMINAL :  FILE  TTPE) 
return  natural 

is 

RESULT  :  NATURAL; 
begin 

—  should  bs  dsflnsd  bp  laplsasntor 
return  RLSULT; 
end  MAXIMUM_FUNCTION_KET; 

function  maximum  function  key  return  natural 

is 

begin 

return  maximum_function_key  (current_input) ; 
end  maximum  function  ket; 


procedure  st(terminal:  file  type; 

ITEM:  out  CHARACTER: 
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KEYS.  Out  FUNCTION  JCEY_DESCRIPTOR) 

is 

begin 

null;  --  »houla  b«  dtflnad  by  lsplastntor 
end  cet; 

procedure  GET  (ITEM:  out  CHARACTER; 

KEYS :  out  FUNCTIQN_KEY_D£SCRIPTOR) 

ia 

begin 

GET  (CTRRENTJJUTPUT,  ITEM,  KEYS); 
end  GET; 


procedure  GET  (TERMINAL: 

ITEM; 

LAST: 

KEYS: 

is 


FILE_TYPE; 

Out  STRING; 

OUt  NATURAL; 

Out  FUNCTION  KEY  DESCRIPTOR) 


begin 

null.  --  abould  b«  dtflnad  by  lsplestntor 
end  get. 


procedure  GET  (ITEM:  out  STRING; 

LAST:  out  NATURAL; 

KEYS:  OUt  FUNCTION_KEY_DESCRIPTOR) 

is 

begin 

GET  ( CURRENT^ I NPUT ,  ITEM.  LAST.  KEYS); 
end  get. 


function  FUNCTION JCEY_COUNT (KEYS;  FUNCTION _KEY_DESCHIPTOR) 

return  natural 

is 

RESULT  :  NATURAL; 
begin 

—  gftould  b«  daflnad  by  lsplasantor 
return  RESULT; 

end  FUNCTIO*_KEY_COUNT; 

procedure  functionjcey(keys: 

INDEX: 

KEY_IDENTIFIER 
POSITION: 

is 

begin 

—  should  b«  daflnad  by  laplasantor 
null; 

end  FUNCTIQNJCEY; 


FUNCTI0N_KEY_DESCRIPTOR ; 

positive” 

Out  POSITIVE. 

OUt  NATURAL) 


procedure  function_key_name (TERMINAL: 

KEY_IDENTIFIER 

KEy'nAME: 

LAST: 

is 

begin 

—  snoald  b«  daflnad  by  lsplastntor 
null . 

end  FUNCTION  KEY  NAME , 


FILE_TYPE; 
POSITIVE; 
out  STRING; 
OUt  POSITIVE) 


procedure  function_key_name(key_identifier: 

KEY_NAME: 

LAST : 


POSITIVE, 
out  STRING; 
OUt  POSITIVE) 
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is 

begin 

FUNCT 1 0  N  KEY  NAME 

(CURRENT_ INPUT.  KEY_IDENTIFIER ,  KEY_NAME.  LAST) ; 
end  FUNCTIONJCEY_NAME; 

procedure  new  line  (terminal:  file  ttfe; 

count :  positive  :=  i)  is  separate; 

procedure  new_line (count:  positive  :  =  1) 

is 

begin 

NEW_LINE  (CURR£NT_OUTPUT ,  COUNT); 
end  new  LINE; 


procedure  new_pace (terminal:  FILE-TYPE)  is  separate; 

procedure  new_page 

is 

begin 

NEWPAGE  (CURRENT-OUTPUT)  ; 
end  NEW  PAGE; 

end  SCROLL  TERMINAL; 

separate  (CAIS) 

package  body  pace  terminal  is 

use  NODE-DEFINITIONS. 

Use  NODE-MANAGEMENT; 
use  IO-DEFINITIONS; 
use  TEXT-IQ ; 

procedure  SET_POSITION (TERMINAL:  FILETTPE; 

POSITION:  POSITION-TYPE) 

is 

begin 

null.  —  should  b«  d#f  m«d  by  lspitssntor 
end  SET-POSITION; 

procedure  set_position (position:  position_type) 

is 

begin 

SET-POSITION  (CURRENT  OUTPUT,  POSITION); 
end  SET-POSITION, 

function  get_position (terminal:  file_type) 
return  position_type 

is 

RESULT  :  P0SITI0N_TTPE; 

begin 

—  should  b«  dwflnsd  by  Ispliasntor 
return  RESULT; 
end  GET_POSITION, 

function  GET_P0SITI0N  return  position  ttpe 

is 

begin 

return  get_position  (current_output)  ; 
end  GET  POSITION, 
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Appendix  D 

PACKAGE  LISTING  OF  CAIS  PROCEDURES  AND 
FUNCTIONS 


This  appendix  lists  the  CAIS  procedures  and  functions  in  the  context  of  their  asstclated  packages. 
This  appendix  Is  Intended  to  provide  a  simple  reference  to  the  CAIS  procedures  and  functions  in 
package  order. 


Operation 


Manipulation  of 
node  handles 


Querying  node 
kind  and  name 


Pathname  queries 


Node  queries 


Node  duplication 
Interfaces 


Description  and  Interfaces 

Package  NODE _ MANAGEMENT 

The  following  Interfaces  are  used  for  manipulating 
node  bandies  and  determining  node  handle  status  and 
node  handle  Intent, 
procedure  OPEN 
procedure  CLOSE 
procedure  CHANGE_INTENT 
function  IS  _  OPEN 
function  INTENT  _  OF 

The  following  Interfaces  are  used  to  determine  the 
kind  of  a  node  (file,  process,  or  structural)  and 
the  primary  name  of  a  node, 
function  KIND 
function  PRIMARY  _  NAME 

The  following  Interfaces  allow  queries  about 
pathnames.  None  of  these  interfaces  perform 
accesses  to  nodes;  they  perform  pathname 
manipulations  at  the  syntactic  level  only, 
function  PRIMARY  _  NAME 
function  PRIMARY 2  KEY 
function  PRIMARY^ RELATION 

function  PA  TO  _  KEY 
function  PATH  _  RELATION 
function  BASE _  PATH 
function  LAST _  RELATION 
function  LAST  _KEY 

The  following  Interfaces  allow  queries  about  nodes, 
function  IS  _  OBTAINABLE 
function  IS  _  SAME 
procedure  GET _ PARENT 

The  following  Interfaces  are  used  to  duplicate 
single  nodes  or  trees  of  nodes  spanned  by 
primary  relationships. 

procedure  COPY _ NODE  ' 
procedure  COPY_TREE 
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function  TEXT_LENGTH(LIST:  LIST  TYPE; 

MAMED  MAME_STRING) 

return  positive 

Ml 

RESULT:  POSITIVE; 

begin 

—  should  ba  daflnad  by  lspleaantor 

return  result ; 
end  TEXT_LENGTH; 

function  TEXT_L£NGTH(LIST:  LIST  TYPE; 

MAMED:  T0KEN_TYPE) 

return  positive 

is 

RESULT:  POSITIVE; 

begin 

—  should  ba  daflnad  by  laplaaantor 
return  result; 

end  text_ length  ; 

package  body  IDENTIFIER_item  is  separate 
package  integer_ITem  is  separate 
package  FLOAT_ITEM  is  separate 
package  STRing_item  is  separate 


end  LIST  UTILITIES; 
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POSITION:  POSITIOH_COUNT) 

return  itemjcind 

ia 

RESULT:  ITEMJCIND; 

begin 

—  should  be  defined  By  lapleaentor 
return  result, 

end  ge:_itemjcind; 

function  G£T_ITEM_KIND(LIST:  list_type, 

NAMED :  NAMe”sTRING) 

return  item  kind 

ia 

RESULT:  ITEMJCIHD; 

begin 

—  should  be  defined  by  lapleaentor 
return  RESULT; 

end  GET_  ITEMJCIND; 

procedure  merge  CFRONT:  listjtype; 

BACK :  list"  TYPE : 

RESULT:  in  out  LISTJTYPE) 
is  separate; 

function  length  (list:  list  type)  return  count 

is  separate; 

procedure  item  jiame (list.  listjtype; 

POSITION:  POSITION_COUNT; 

NAME:  OUt  TOKEN  JTYPE) 

is  separate; 

function  position  by  name  (list  listjtype; 

NAMED :  NAME~STRING) 

return  position_count 

ia 

RESULT:  POSITION_COUNT; 

begin 

—  should  bs  defined  by  lapleaentor 
return  result; 

end  position  byj'ame; 

function  POSITIONBY  JIAME  (LIST:  LIST  TYPE; 

NAMED:  TOKEN  TYPE) 
return  position_count 

ia 

RESULT:  POSITIIJNCOUXT; 

begin 

—  should  bs  defined  by  lapleaentor 
return  result. 
end  POSITIONBYNAME; 

function  text  jjength  (list:  list_type) 
return  natural 

ia 

RESULT:  NATURAL; 
begin 

—  should  be  defined  by  lapleaentor 
return  result; 

end  TEXT  LENGTH; 

function  TEXT_LENGTH(LIST:  LIST  TYPE; 

POSITION:  POSITION  COUNT) 

return  positive 

ia 

RESULT:  POSITIVE, 
begin 

—  should  be  defined  by  lapleaentor 
return  RESULT; 

end  TEXT  LENGTH; 
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return  result. 
end  set  extract, 


t 


I 


I 


procedure  splice  (list  .  in  out  list  type; 

POSITION:  POSITION_COUNT; 

SUB_LIST:  LIST  TEXT) 

18 

RESULT:  LIST_TEXT(1 . . 10) ; 

begin 

null;  —  ahoald  ba  dafiaad  by  laplaeantor 
end  splice; 


procedure  splice  (LIST:  in  out  list  type; 

POSITION:  POSITION  COUNT; 

SUBJ-IST:  LIST  TYPE) 

18 


RESULT:  LIST  TEXT{1..10); 
begin 

null;  —  ahoold  ba  dafiaad 

end  splice; 


by  laplaaaator 


procedure  delete  (list:  in  out  list  type, 

.  POSITION:  POSITION  COUNT) 

18 

RESULT:  LIST_TEXT(1. .10). 

begin 

null,  ahoald  ba  defined  by  tipliunior 

end  DELETE. 


procedure 

18 


DELETE  (LIST: 

NAMED: 


in  out  LIST  TYPE; 

NAMESTRING) 


RESULT:  LIST  TEXT (1 . .10) . 

begin 

null;  —  ahoald  ba  dafiaad  by  laplaaaator 
end  DELETE; 

procedure  delete(LIST:  in  out  LIST  TYPE. 

NAMED:  TOKEN  TYPE) 

18 


RESULT:  LIST  TEXT (1.  .10)  . 
begin 

null.  ahoald  ba  dafiaad  by  laplaaaator 

end  DELETE . 

function  c_t_list_kind(list  list  type) 
return  list  kind; 

it 

RESULT  LIST  KIND; 

begin 

ahoald  ba  dafiaad  by  laplaaaator 
return  result  , 
end  get_l i st  kind; 


function  GET_ITEM_KIND(LIST:  LIST  TYPE; 

NAMED:  TOKEN  TYPE) 

return  item  kind 

ia 

RESULT.  ITEMJtlND; 

begin 

ahoald  ba  dafiaad  by  laplaaaator 
return  result; 
end  get  item  kind; 

function  GET_ITEM_KIND(LIST:  list  TYPE; 
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null;  should  b«  dsflnsd  by  laplesentor 
end  extract, 

procedure  extract  (list:  list  type. 

NAKED :  TOKEN  TYPE) 

LIST_ITEN:  out  LIST  TYPE); 

begin 

null;  Mould  b*  dsflnsd  by  laplsnsntor 
end  extract, 

procedure  replace  (list  :  in  out  list_type; 

LIST_ITEN:  LIST  ~TYPE ; 

POSITION:  POSITI  QN_COUNT) 

null;  should  b«  dsflnsd  by  laplsasnuor 
end  REPLACE; 

procedure  replace  (list:  in  out  listtype; 

LIST_ITEM:  LIST_TYPE; 

,  .  NAMED:  NAME  STRING) 

begin 

Mould  bs  dsflnsd  by  laplsasntor 
end  REPLACE; 

procedure  replace  (list :  in  out  list  type; 

LIST_rren :  LIST  >YPE ; 

.  .  NAMED.  TOKEN  TYPE) 

begin 

null;  Mould  bs  dsflnsd  by  lapleaentor 
end  REPLACE; 

procedure  insert  (list:  in  out  list  type; 

LIST_ITEM :  LIST~TYPE ; 

,  POSITION:  COUNT) 

begin 

null;  should  bs  dsflnsd  by  laplsssntor 
end  INSERT; 

procedure  insert  (list  .  In  out  list  type; 

LIST_rTEM:  LIST~TYPE ; 

NAMED :  NAME~STRING ; 

.  POSITION.  COUNT) 

begin 

null;  —  should  bs  dsflnsd  by  laplsssntor 
end  INSERT; 

procedure  insert  (list  in  out  list  type; 

LIST_ITEM:  LIST_TYPE; 

"AXED:  TOKEN_TYPE; 

.  POSITION:  COUNT) 

begin 

null.  —  should  bs  dsflnsd  by  laplsasntor 
end  INSERT. 

function  POSITION_BY_VALUE(LIST:  list  TYPE; 

VALUE:  LIST' TYPE; 

START_POSITI0N:  POSIT ION_COUNT 

:=  POSITION  COUNT 'FIRS 
END_POSITION:  POSITI ON_COUNT~ 

_ .  :=  POSITION  COUNT ’LAST 

return  positiqn_count  la  separate; 


function  SET_EXTRACT(LlST: 

POSITION: 

LENGTH: 

return  list  text 

la 


LIST_TY7E; 

POSITION_COUNT; 

POSITIVE”: =  POSITIVE 'LAST) 


RESULT:  LIST  TEXT(1  .10); 
begin 

should  bo  difloid  by  liplmntor 
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procedure  import (node:  *»£  m. 

procedure  import^11*-""*- 
ia  HOSTFILEJIAME:  STRIFG) 

NODE.  NODE  TYPE; 
begin 

OPEN (NODE , NAME ,  (,=>  NRITE  CONTENTS' ) ■ 
IMPORT CNODE,  HOST  FILE  NAME) 

CLOSE (NODE) ; 

exception 

when  others  => 

CLOSE (NODE) ; 

raise; 

end  IMPORT; 

procedure  EXPORTCNODE:  NODEJTYPE; 

procedure  export 
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lB  HOST_FILE_NAME:  STRING) 

NODE:  NODE  TYPE; 
begin 

OPEN (NODE . NAME ,  (1=>R£AD  CONTENTS) ) • 
EXPORT (NODE, HOST  FILE  NAME) 

CLOSE (NODE); 
exception 

when  others  *> 

CLOSE (NODE) ; 
raise; 

end  EXPORT; 

end  file  import  export; 


separate  (CAIS) 

package  body  LIST  UTILITIES  is 

use  node  definitions, 

use  NODEMANAGEMENT; 

procedure  copy  (To  list: 

prom  list 


out  LIST  TYPE; 

LZstjtype)  is  separate; 


function  to_list(list_string:  string) 

return  list  type  is  separate 
function  to_text(list  item  list  type) 
return  list  text 

is 

RESULT.  LIST  TEXTfl. .10) 
begin 

--should  b«  o.rin.d  By  laplts.ntor 
return  result; 
end  TO  TEXT; 

function  IS_E5UAL (LISTl :  LIST  TYPE; 

LISTS :  LIST~TYPE) 
return  boolean  if  separate; 

procedure  extract(list:  list_typE; 

POSITION:  POSITION  COUNT; 

begin  LIST__ITEM:  out  LIST  TYPE); 

procedure  EXTRACT  (LIST:  LIST  TYPE; 

l‘AMED:  NAME-  STRING; 

begin  «-IST.ITEM:  Out  LIST_"TYPE); 
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end  AR£A_QUALIFIER_REQUIRES_SPACE; 

end  form  terminal ; 
separate  (CAis) 

package  body  magnetictape  La 
use  NODE_DEFINITIONS; 
use  NODE  MANAGEMENT ; 

procedure  mount (tape_drive:  filejtype; 

tape"  NAME :  REEL,”  NAME ; 

DENSITY:  positive)  is  separate; 
procedure  lqad_unlabeled ctape_drive .  filejtype; 

DENSITY :  POSITIVE ; 

BLOCK_SIZE:  POSITIVE) 

is  separate; 

procedure  initialize  unlabeled (tape_driye :  FILE_type, 

DENSITY:  POSITIVE; 

BLOCK_SIZE :  POSITIVE) 

is  separate; 

procedure  load_label£D  (tape_drive  :  file_type; 

VOLUME_IDENTIFIER:  V0LUME_STRING ; 

DENSITY:  POSITIVE; 

BL0CK_SIZE.  positive)  is  separate; 
procedure  initialize_labeled(tape_drive:  file  type; 

VOLUME_IDENTIFIER:  VDLUME_STRING ; 
DENSITY:  POSITIVE; 

BLOCK  SIZE:  POSITIVE; 

ACCESSIBILITY:  CHARACTER  :=’  •) 
is  separate; 

procedure  unload  (tape  drive  :  file  type)  is  separate; 
procedure  dismount (TAPE_DRIVE:  file  type)  is  separate; 
function  is  loaded  (tape  drive  file_type) 
return  boolean  is  separate; 
function  is  mounted  (tape  drive  filejtype) 
return  boolean  is  separate; 
function  TAPESTATUS  (TAPE_DRIVE ;  FILE  TYPE) 
retu~rn  tapeposition  is  separate; 
procedure  renind  tape  (tape  drive  file  type)  is  separate; 
procedure  skip  tape  marks (tape  drive :  file  type; 

NUMBER:  INTEGER  :=1; 

TAPE  STATE:  out  TAPE  POSITION) 
is  separate; 

procedure  writetapemark (tape  drive :  file  type. 

NUMBER:  POSITIVE  :«1; 

TAPE  STATE  out  TAPE_POSITION) 
is  separate; 

procedure  volumeheader (tape  drive  file  type; 

VOLUME_IDENTIFIER :  VOLUME  STRING. 
ACCESSIBILITY:  CHARACTER  :**  •) 

is  separate; 

procedure  file  header  (tape  drive:  filejtype; 

file" IDENTIFIER:  FILE  STRING; 

EXPIRATIONDATE:  STRING  :=■  99306*; 
ACCESSIBILITY:  CHARACTER  :**  ’)  is  separate 

procedure  end_file_label(tape_drive:  file  type)  is  separate; 
procedure  read_label (tape  drive ;  filejtype; 

label:  out  label_string)  is  separate; 


end  MAGNET  I  C_TAPE; 

package  file  import  export  is 
use  node_definitions; 
use  node~management; 
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ITEM  :  out  PRIKTABL£_CHAR-\CTER) 

is 

begin 

—  should  ba  defined  by  lsplesentor 
null, 
end  GET; 


procedure  GET  (FORM: 

ITEM: 


is 


in  out  FORM  TTPE; 
OUt  STRING) 


begin 

for  INDEX  in  ITEM 'FIRST  ..  ITEM-LAST  loop 

GET  (FORM.  ITEM  (INDDC) )  ;  —  Raid  a  a  Ingle  character 
end  loop; 
end  get. 


function  is_form_updated  (form  :  formttpe)  return  boolean 

is  separate; 

function  termination_key(form:  fdrm_ttpe)  return  natural 

is  separate; 

function  form_size(fqrm:  form  ttpe)  return  positiontype 

is  separate; 

function  terminalsize  (terminal,  file  ttpe) 
return  position  type 

is 

RESULT:  POSITION_TYPE; 

begin 

--  should  ba  defined  by  lsplesentor 
return  RESULT; 
end  TERMINAL  SIZE; 

function  terminal  size  return  position  type 

is 

begin 

return  terminal  size  (currentoutput)  ; 

end  TERMINAL  SIZE; 


function  area_qualifier_requires_space(form  form  type) 
return  boolean 

is 

RESULT  :  BOOLEAN; 

begin 

—  should  be  defined  by  lsplesentor 
return  result; 

end  area_qualifier_requires_space; 

function  areaqualifierrequiresspace 

(TERMINAL:  FILE  TYPE)  return  BOOLEAN 

is 

RESULT  :  BOOLEAN; 

begin 

—  ehould  be  defined  by  lsplesentor 
return  RESULT; 

end  AREA_QUALIFIER_REQUIRES_SPACE; 

function  area  qualifier  requires  space  return  boolean 

is 

begin 

return  area_qualifier_requires_space  (current  output) ; 
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begin 

sel£ct_graph:c_renditidh  (current  output.  rendition)  ; 

end  SEL£CT_GRAPHIC_RENDITION; 
end  page_terminal; 
separate  (CAIS) 

package  body  porn  terminal  ia 
uae  NODE_DEFINlflONS ; 
uae  NODEMANAGEMENT; 
uae  I0_DEFINITI0NS; 
uae  TEXT_IO; 

function  MAXIMUM  J?UNCTTON_KEY (TERMINAL:  FILE_TYPE) 
return  natural  ia  separate; 

function  maximum_function_key  return  natural 

ia 

begin 

return  maximumfunctionkey  (current  input); 
end  MAXIMUM  FUNCTION  KEY; 


procedure  oefinequalifiedarea 

(FORM:  in  OUt~F0RM  TYPE; 


INTENSITY: 
PROTECTION : 
INPUT: 

VALVE : 


AREA_ INTENSITY  :=  NORMAL; 
AREA_PROTECTION  ;=  PROTECTED; 
AREAINPUT  :=  GRAPHT  CCHARACTERS : 
AREA  VALUE  =  NO  FII  lT  is  separate; 


procedure 

procedure 

procedure 


nEMOVE_AREA_QUALIFIER (FORM :  in  out  formtype)  ia  separate: 


TET_POSITION (FORM :  in  OUt  FORM  TYPE; 

POSITION:  POSITION  TYPE)  is  separate; 


NEXT_QUALIFIED_AREA(FORM : 

COUNT: 


in  Out  FORM  TYPE; 

positive  :  =  i)  is  separate; 


procedure 

is 

begin 
null;  — 
end  put; 


PUT  (FORM:  in  out  FORMTYPE; 

ITEM:  PRINT ABL£_CHARACTER) 

should  t>«  defined  by  lsplementor 


procedure  PUT (FORM:  in  out  FORM  TYPE;  ITEM  :  STRING) 

is 

begin 

for  INDEX  in  ITEM 'FIRST  ..  ITEM' LAST  loop 

PUT  (FORM,  ITEM  (INDDO);  —  Write  a  single  character 
end  loop; 
end  PUT; 


procedure  erase_area(form:  in  out  form  type)  is  separate; 

procedure  erase_form (form :  in  out  form_type)  is  separate; 

procedure  activate  (terminal:  file  type  ; 

form:  in  out  form'type)  is  separate; 

procedure  get(form.  in  out  form  type; 
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procedure  erase_.in_display 
(TERMINAL:”  FILE_TYPE; 

SELECTION:  SELECT_ENUMERATI  ON )  is  Separate; 

procedure  erase_in_display 

(SELECTION-  SEL£CT_EMUMERATION) 

is 

begin 

ERASE_IN_OISPLAY  (CURRENTJJUTPUT.  SELECTION) ; 
end  ERASE  IN  DISPLAY; 


procedure  ERASE_IN_LINE (TERMINAL:  FILE_TYPE ; 

selection;  select_emumeration)  is  separate; 

procedure  erase_in_line (selection :  select_emumeration) 

is 

begin 

ERASE_IN_LINE  (CURR£NT_OUTPUT,  SELECTION); 
end  ERASE  IN  LINE; 


procedure  insertspace (terminal:  file_type. 

COUNT:  POSITIVE  :=  i)  is  separate; 

procedure  insert  space  (count  :  positive  ;=  D 

is 

begin 

INSERT  SPACE  (CURRENTOUTFUT.  COUNT); 

end  insert  space; 


procedure  I NSERTLINE (TERMINAL :  FILE  TYPE; 

COUNT:  positive  =  i)  is  separate; 

procedure  INSERT  LINE  (COUNT :  POSITIVE  :=1) 

is 

begin 

INSERTLINE  (CURRENTOUTPUT.  COUNT); 
end  INSERT  LINE; 


function  graphicrendition  support 

(TERMINAL:  FILE_TYPE; 

RENDITION:  GRAPHIC_RENDITIDN_ARRAY) 

return  boolean  is  separate;  ~ 

function  CRAPHIC  RENDITION  SUPPORT 

(RENDITION:  GRAPHIC_RENDITION_ARRAY) 

return  boolean 

is 

begin 

return  graphic_rendition_support 
(current'output,  RENDITION); 
end  GRAPHIC  RENDITION  SUPPORT; 


procedure  select  graphic  rendition 

(TERMINAL:  ~  FILE  TYPE; 

RENDITION :  GRAPHIC _RENDITION_ARRAY  : = 

oefault_graphic_rekd iti on)  is  separate; 


procedure  select_graphic_rendition 

(RENDITION:"  GRAPH IC_RENDITI 0N_ARRAY  : = 

DEFAULT  GRAPHIC  RENDITION) 
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RESULT:  NATURAL; 
begin 

—  ahould  ba  daflnad  by  laplaaantor 
return  result; 

end  FUNCTION  KEY  COUNT; 


procedure  function  key  (keys: 

INDEX: 

KEY_IDENTIFIER : 
POSITION: 

is 

begin 

—  mould  ba  daflnad  by  laplaaantor 
null; 

end  FUNCTION  KEY; 


FUNCTI  ON_KEY_DESCR  I PTOR ; 

positive” 

out  POSITIVE; 
out  NATURAL) 


procedure  function  key  name  (terminal: 

KEY_IDENTIFIER: 

key'name: 

LAST: 

ia 

begin 

—  anould  ba  daflaad  by  laplaaantor 
null; 

end  function  key  name; 


FILETYPE; 
POSITIVE; 
out  STRING; 
out  POSITIVE) 


procedure  FUNCTION_KEY_NAME (KEY_ IDENTIFIER : 

KEYNAME : 

LAST: 

ia 

begin 

FUNCTIONKEYNAME 

(CURRENT  INPUT.  KEY  IDENTIFIER.  KEY  NAME.  LAST) ; 
end  FUNCTION  KEY  NAME;" 


POSITIVE; 
out  STRING; 
OUt  POSITIVE) 


procedure  DELETE  CHARACTER  (TERMINAL:  FILE  TYPE; 

COUNT:  positive  :=  D  ia  separate ; 

procedure  DELETECHARACTER (COUNT :  POSITIVE  :=  1) 

ia 

begin 

DELETE_CHARACTER  (CURRENT_OUTFUT.  COUNT) ; 
end  DELETE  CHARACTER; 


procedure  deuete_line  (terminal  :  file_type; 

COUNT:  POSITIVE  :*  i)  ia  separate; 

procedure  deletx_lixe  (count  :  positive  :=  1) 

is 

begin 

DELETE_LINE  (CURRENT_OUTPUT ,  COUNT) ; 
end  DELETE  LINE. 


procedure  erase_chaaacter  (terminal :  file_type. 

count.  POSITIVE  :=  i)  is  separate; 

procedure  erase_character  (count  :  positive  ;*  1) 

ia 

begin 

ERASE_ CHARACTER  (CURAENT_OUTPUT.  COUNT) ; 
end  ERASE  CHARACTER; 
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return  RESULT; 
end  echo; 


function  echo  return  boolean 

i> 

begin 

return  echo  (current_ihput)  ; 
end  echo  ; 


function  maximum_functionjcey (terminal:  file  ttpe) 
return  natural 

ia 

RESULT  :  NATURAL; 
begin 

—  should  b«  defined  by  lapleaentor 
return  RESULT; 
end  KAXIMUM_FUNCTION_KEY; 

function  maximum_functi on_key  return  natural 

ia 

begin 

return  MAXIMUM_FUNCTION_KEY  (CURRENT  INPUT)  ; 
end  MAXIMUM  FUNCTION  KEY; 


procedure  GET  (TERMINAL:  FILE  TYPE; 

ITEM:  OUt  CHARACTER; 

KEYS:  OUt  FUNCTION JCEY  DESCRIPTOR) 

is 

begin 

null;  —  should  be  dsflosd  by  lapleaentor 
end  GET; 

procedure  GET  (ITEM:  out  CHARACTER; 

KEYS:  out  FUNCTI  ON_KEY_DESCRIPTOR) 

ia 

begin 

GET  (CURRENT_INPUT.  ITEM.  KEYS); 
end  GET; 


procedure  get  (terminal:  file_type; 

ITEM:  out  STRING; 

LAST :  OUt  NATURAL . 

KEYS :  OUt  FUNCTI ON_KEY_DESCR IPTOR) 

ia 

begin 

null;  —  should  be  defined  by  lapleaentor 
end  GET; 

procedure  get(item:  out  string; 

LAST:  OUt  NATURAL; 

KEYS,  in  OUt  FUNCTION  KEY  DESCRIPTOR) 

ia 

begin 

GET  (CURRENT  INPUT,  ITEM,  LAST.  KEYS); 
end  GET; 


function  function_key_count(keys: 
return  natural 


ia 


FUNCTIONJCEYJJESCRIPTOR) 
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is 

begin 

—  Mould  b«  duflnud  by  lapl«a«ntor 
null; 

end  bell, 

procedure  bell 

ia 

begin 

BELL  (CURRENTJJUTPUT) ; 
end  BELL; 


procedure  put  (terminal  ;  file  type; 

ITEM:  CHARACTER) 

ia 

begin 

—  Mould  b«  daflnud  by  lapluatnbor 
null; 
end  PUT; 

procedure  put  (item:  character) 

ia 

begin 

PUT  (CURREKT_OUTPUT .  ITEM) ; 

end  put; 


procedure  PUT  (TERMINAL;  FILE_TYPE;  ITEM  :  STRING) 

ia 

begin 

for  INDEX  in  ITEM-FIRST  .  ITEM-LAST  loop 
PUT  (TERMINAL,  ITEM  (INDEX)); 
end  loop: 
end  put. 


procedure  put  (ITEM;  STRING) 

ia 

begin 

PUT  (CURRENT_OUTPUT,  ITEM); 
end  PUT; 


procedure  set_echo  (terminal  .  file_type; 

TO:  BOOLEAN  :=  TRUE) 

ia 

begin 

—  Mould  b«  dufinud  by  lapluauntor 
null; 

end  SET_ECHO; 

procedure  set_echo(TO:  boolean  *  true) 

ia 

begin 

SET_ECHO  (CRRENT_INPUT,  TO)  ; 

end  "set  echo; 


function  echo  (terminal  ,  file  type)  return  boolean 

ia 

RESULT:  BOOLEAN; 
begin 

~  Mould  b«  dufinud  by  lapluaMtor 
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function  TERMINAL_SIZE (TERMINAL:  FILE_TYPE) 
return  posjtion_type 

la 

RESULT  :  P0SITI0N_TYPE; 

begin 

—  should  ba  daflnad  by  lmplasanbor 
return  result; 
end  TERUINAL  SIZ! 

function  terminal_SIZE  return  position_TYPE 

is 

begin 

return  ternikalsize  (curr£NT_qutput)  ; 
end  terminal  size; 


procedure  SET  TAB  (TERMINAL:  FILE_TYPE; 

KIND:  TAB_ENUM£RATICN  :  =  HORIZONTAL) 

is 

begin 

—  should  ba  daflnad  by  isplestntor 
null; 

end  SET  TAB; 

procedure  SET_TAB(KIND:  TABENUUERATION  :  =  HORIZONTAL) 

is 

begin 

SET  TAB  (CURRENT  OUTPUT,  KIND) ; 
end  “set  tab: 


procedure  clear  tab  (terminal:  file  type; 

KIND:  TAB_EMUMERAT10N  :»  HORIZONTAL) 

is 

begin 

—  should  ba  daflnad  by  Ispleaantor 
null; 

end  clear  tab; 

procedure  clear_tab(kind  tab_enukeration  =  horizontal) 

is 

begin 

CLEARTAB  (CURREXTJJUrPUT .  KIND) ; 

end  clear  tab; 


procedure  tab  (terminal:  file_type; 

KINO:  TAT  ENUMERATION  :=  HORIZONTAL; 

COUNT:  POCITIVE  :=  1) 

is 

begin 

—  should  ba  dtflaad  by  lsplasaator 
null, 
end  tab, 

procedure  tab(kind:  tab  enumeration  *  horizontal; 
COUNT:  POSITIVE  :*  1) 

is 

begin 

TAB  (CURR£NT_OUmjT ,  KIND.  COUNT). 

end  tat  ; 


procedure  bell  (terminal,  fiiejtpe) 
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Alteration  of 
relationships 


Deletion  of  primary 
relationships 


I 


Creation  and 
deletion  of 
secondary 
relationships 


Node  Iterators 


I 

Manipulation  of  the 
CURRENT  _  NODE 
relationship 


Manipulation  of 
attributes 

I 


L 

I 

I 


The  following  Interface  Is  used  to  alter  the 
primary  relationship  of  a  node,  thereby  changing 
Its  unique  primary  name. 

procedure  RENAME 

The  following  two  Interfaces  allow  the 
deletion  of  the  primary  relationship  of  a  single 
node  or  of  the  primary  relationships  of  a  node 
and  all  the  nodes  that  are  contained  In  the  tree 
spanned  by  primary  relationships  emanating  from 
these  nodes. 

procedure  DELETE_NODE 
procedure  DELETE_TREE 

The  following  Interfaces  allow  the  creation  and 
deletion  of  user-defined  secondary  relationships. 


procedure  LINK 
procedure  UNLINK 

The  following  Interfaces  allow  the  Iteration 
over  nodes  reachable  from  a  given  node  via  Its 
emanating  relationships. 

procedure  ITERATE 
function  MORE 
procedure  GET  _  NEXT 

The  following  Interfaces  allow  changes  to 
the  relationship  of  the  predefined  relation 
CURRENT_NODE  emanating  from  the  current  process 
node  and  open  a  node  handle  on  the  node  that  Is 
the  target  of  such  a  relationship 

procedure  SET  _  CURRENT  _  NODE 
procedure  GET _ CURRENT _ NODE 

Package  ATTRIBUTES 

The  following  Interfaces  are  used  for  defining 
and  manipulating  the  attributes  for  nodes  and 
relationships. 

procedure  CREATE_ NODE_ ATTRIBUTE 
procedure  CREATE_ PATH _  ATTRIBUTE 
procedure  DELETE_NODE~ ATTRIBUTE 
procedure  DELETE _ PATH _  ATTRIBUTE 
procedure  SET _  NODE _  ATTRIBUTE 
procedure  SET_ PATH  ^ATTRIBUTE 
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Manipulation  of 
access  control 


Creation  of 
structural  node 


Spawning  a 
process 


Awaiting  process 
termination 
or  abortion 


Invoking  a 
process 


Creating  a 
new  Job 


Examination  and 
modification  of 
results  list 


procedure  GET  _  NODE  _  ATTRIBUTE 
procedure  GET_PATH  "ATTRIBUTE 
procedure  NODE  _  ATTRIBUTE  _  ITERATE 
procedure  PATH _ATTRIBUTE_  ITERATE 
function  MORE 
procedure  GET  _  NEXT 

Package  ACCESS _  CONTROL 

The  following  Interfaces  are  used  to  manipulate 
access  control  Information  for  nodes. 

procedure  SET _ ACCESS _CONTROL 
function  IS _ GRANTED 
procedure  ADOPT 
procedure  UNADOPT 

Package  STRUCTURAL  _  NODES 

The  following  Interface  Is  used  to  create  a 
structural  node  and  to  establish  the  primary 
relationship  to  It. 

procedure  CREATE  _  NODE 

Package  PROCESS  _  CONTROL 

This  interface  creates  a  process  node.  Initiates 
the  new  process,  and  returns  control  to  the  calling 
task  upon  node  creation. 

procedure  SPAWN  _  PROCESS 

This  Interface  suspends  the  calling  task  and 
waits  for  the  process  to  terminate  or  abort. 

procedure  AWAIT  _  PROCESS  COMPLETION 

This  Interface  Is  functionally  the  same  as 
performing  a  call  to  SPA WN_ PROCESS  followed 
by  a  call  to  AWAIT_PROCESS_COMPLETION. 

procedure  INVOKE _ PROCESS 

This  Interface  creates  a  new  root  process  node. 
Control  is  returned  to  the  calling  task  after 
the  new  Job  Is  created. 

procedure  CREATE _  JOB 

These  Interfaces  provide  the  techniques  for  a 
process  to  examine  and  modify  a  results  list. 
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Determination 
of  state  of 
process  and 
input  parameters 


Modification 
of  tbe  status 
of  a  process 


Handling  I/O 
and  time 
queries 


procedure  APPEND _ RESULTS 
procedure  WRITE _ RESULTS 
procedure  GET_ RESULTS 

These  Interfaces  are  used  to  determine  tbe  value 

of  the  predefined  attributes  CURRENT _  STATUS  and 

PARAMETERS. 

function  STATUS _ OF _ PROCESS 
procedure  GET_  PARAMETERS 

These  Interfaces  change  tbe  process  status  of  a 
process. 

procedure  ABORT_ PROCESS 
procedure  SUSPEND  _  PROCESS 
procedure  RESUME _ PROCESS 

These  Interfaces  are  used  to  query  process 
nodes  to  determine  the  values  of  the  predefined 
attributes  HANDLES _ OPEN,  IO- UNITS,  START _ TIME, 
FINISH_TIME,  and  MACHINE _ TIME. 

function  HANDLES  _  OPEN 
function  IO_  UNITS 
function  START _ TIME 
function  FINISH  _  TIME 
function  MACHINE  TIME 


Packages  CAIS.DIRECT_IO,  CAIS.SEQUENTIAL  IO.  CAIS.TEXT  IO 


Creating,  opening, 
and  deleting 
secondary  storage 
file 


These  Interfaces  are  used  to  create  a  file 
and  Its  file  node,  to  open  a  handle  on  a 
file,  and  to  delete  a  file.  These  may  be 
used  with  direct  access,  sequential  access, 
and  text  files. 


procedure  CREATE 
procedure  OPEN 
procedure  DELETE 


Reading  and  writing 
characters  from/to 
text  file 


Setting  predefined 
relations 


Package  TEXT_IO 

ThN  procedure  Is  used  to  read  and  wri  e  characters 
from /to  a  text  file 

procedure  RESET 
procedure  GET 
procedure  PUT 

These  Interfaces  set  the  relationships  of  the 

prdoflned  relations  CURRENT_ INPUT,  CURRENT  OUTPUT. 
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and  CURRENT  _  ERR  OR. 

procedure  SET_ INPUT 
procedure  SET__ OUTPUT 
procedure  SET  _  ERROR 

These  Interfaces  are  used  for  returning  an  open  file 
handle  on  the  error  file  and  for  returning  an  open 
file  handle  on  the  current  error  output  file. 

function  STANDARD  _  ERROR 
function  CURRENT _ERROR 

Package  10_  CONTROL 

Opening  a  This  Interface  obtains  an  open  node  handle  from  a 

file  node  file  handle. 

procedure  OPEN _ FILE _ NODE 


Opening  and 
returning 
handles  on 
error  files 


Transmitting  This  Interface  Is  used  to  transmit  data  from  an 

data  from  Internal  file  to  its  associated  external  file. 

Internal  to 
external  file 

procedure  SYNCHRONIZE 

These  Interfaces  are  used  for  performing 
operations  on  log  files  and  for  handling 
prompt  strings,  character  arrays,  and 
function  keys. 

procedure  SET _ LOG 
procedure  CLEAR _ LOG 
procedure  ENABLE_FUNCTION_KEYS 
function  LOGGING 
function  GET_LOG 
function  NUMBER  _  OF  _ ELEMENTS 
procedure  SET _ PROMPT 
function  GETJPROMPT 
function  INTERCEPTED _ CHARACTERS 
function  FUNCTION _ KEYS _ ENABLED 

Creating  This  Interface  creates  a  queue  file  and  Its  node, 

coupled  The  Initial  contents  of  the  queue  file  are  the 

queue  same  as  those  of  the  file  to  which  It  Is  coupled. 

The  queue  file  must  be  of  kind  MIMIC  or  COPY. 

procedure  COUPLE 

Package  SCROLL _ TERMINAL,  PAG E_  TERMINAL,  FORM _  TERMINAL 
Advancing  the  This  procedure  advances  the  active  position  to 


Handling  log 
files,  prompts, 
and  function 
keys 
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active  position 


Querying  terminal, 
controlling  tab 
•top.  sounding 
bell  and  writing 
a  character 


Contolllng  echo, 
querying  function 
keys  and  reading 
characters 
function  keys 


Line  and  page 
advancement 


Performing 
deletions,  erasures, 
and  Insertions  on 

a  page 


the  specified  position. 

procedure  SET_POSITION 

Package  SCROLL  _  TERMINAL.  PAGE  _  TERMINAL 

These  Interfaces  are  used  with  scroll  and  page 
terminals  to  determine  the  active  position, 
determine  terminal  row  and  column  size, 
manipulate  tab  stops,  sound  the  bell,  and 
write  a  character. 

function  GET _  POSITION 
function  TERMINAL _ SIZE 
procedure  SET  _  TAB 
procedure  CLEAR  _ TAB 
procedure  TAB 
procedure  BELL 
procedure  PUT 

These  Interfaces  are  used  for  echoing  characters 
to  associated  output  devices,  determining  the 
maximum  allowable  function  key  Identification 
number  .reading  a  character  or  characters,  and 
determing  Information  about  function  keys. 

procedure  SET  _  ECHO 
function  ECHO 

function  MAXIMUM  _  FUNCTION  _  KEY 
procedure  GET 

function  FUNCTION_KEY_COUNT 
procedure  FUNCTION_KEY 
procedure  FUNCTION _ KEY _ NAME 

Package  S CR O LL _ TERMINAL 

These  Interfaces  are  used  to  control  line  and 
page  advancement. 

procedure  NEW  _ LINE 
procedure  NEW  _  PAGE 

Package  PAGE _ TERMINAL 

These  Interfaces  are  used  for  deleting  characters 
characters  and  lines,  for  replacing  characters 
entire  displays  and  lines  with  spaces  and  for 
Inserting  spaces  and  lines. 

procedure  DELETE _ CHARACTER 
procedure  DELETE  _  LINE 
procedure  ERASE _  CHARACTER 
procedure  ERASE _  IN _  DISPLAY 
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Graphic  rendition 
determination  and 
selection 


De terming  maximum 
value  from 

TERMINATION  KEY 


Opening  form 
and  defining 
qualified  area 


Qualified  area 
advancement, 
writing,  and 
erasing 


Activating  form, 
reading,  and 
determining 
Information 
about  form 


Mounting,  status 
checking,  and 


procedure  ERASE_IN_LINE 
procedure  INSERT  _  SPACE 
procedure  INSERT  _  LINE 

These  interfaces  are  used  for  determining  If  a 
graphic  rendition  Is  supported  and  for  selecting 
a  particular  graphic  rendition. 

function  GRAPHIC_RENDmON- SUPPORT 
procedure  SELECT _ GRAPHIC _ RENDITION 

Package  FORM _ TERMINAL 

This  Interface  returns  the  maximum  value  that 
may  be  returned  by  function  TERMINAT10N__KEY. 

function  MAXIMUM  _  FUNCTION _  KEY 

These  Interfaces  open  a  form  to  the  specified 
she,  determine  If  the  form  Is  open,  define 
a  qualified  area,  and  remove  an  area  qualifier. 

procedure  DEFINE  _  QUALIFIED  _  AREA 
procedure  REMOVE_  AREA  _  QUALIFIER 

These  Interfaces  advance  the  active  position  to 
a  subsequent  qualified  area,  write  to  a  form, 
erase  a  qualified  area,  and  erase  the  form. 

procedure  NEXT _ QUALIFIED __ AREA 
procedure  PUT 
procedure  ERASE  _  AREA 
procedure  ERASE _ FORM 

These  Interfaces  activate  the  form  on  the 
terminal,  read  data  from  the  form,  determine  If 
changes  have  been  made  to  the  form,  determine  the 
termination  key,  determine  the  she  of  the  form  and 
terminal,  and  determine  if  the  area  qualifier 
requires  space. 

procedure  ACTIVATE 
procedure  GET 

function  IS  _  FORM  _  UPDATED 
function  TERMINATION  _  KEY 
function  FORM  _  SIZE 
function  TERMINAL  _  SIZE 

function  AREA_  QUALIFIER  _  REQUIRES  _  SPACE 

Package  MAGNETIC _ TAPE 

These  are  used  to  load  unlabeled  and  labeled 
tapes,  dismount  tapes,  determine  If  s  tape  is 
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writing  tape 
marks 


Initialise  and 
labeling  tapes 


Transferring 
files  between 
CAIS  and  host 
system 


copying  and 
converting  lists 


comparing, 
deleting,  and 
querying  lists 
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loaded  or  mounted  and  where  It  Is  portioned, 
skip  tape  marks,  and  write  a  tape  mark. 


procedure  MOUNT 
procedure  LOAD  _  UNLABELED 
procedure  LOAD  _  LABELED 
procedure  UNLOAD  < 

procedure  DISMOUNT 
function  IS  _  LOADED 
function  IS  _  MOUNTED 
function  TAPE _ STATUS 
procedure  REWIND  _  TAPE 
procedure  SKIP _  TAPE _  MARKS 
procedure  WRITE  _  TAPE  _  MARK 

These  Interfaces  are  used  to  Initialize  tapes,  to 
create  a  volume  file  header,  end  of  file,  read  tape 
label  and  end  of  volume  label. 

procedure  INITIALIZE _  UNLABELED 
procedure  INITIALIZE _ LABELED 
procedure  VOLUME _  HEADER 
procedure  FILE_  HEADER 
procedure  END  _  FILE _  LABEL 
procedure  READ  _  LABEL 

Package  FELE_IMPORT_ EXPORT 

These  Interfaces  are  used  to  transfer  files 
between  a  CAIS  Implementation  and  the  host 
file  system. 

procedure  IMPORT 
procedure  EXPORT 


Package  LIST __  UTILITIES 

These  Interfaces  perform  operations  on  list  Items 
that  are  lists.  Operations  performed  copy 
a  list,  convert  the  textual  representation  to  an  internal 
ttst  representation,  and  convert  an  Internal  representation 
to  a  textual  representation. 

procedure  COPY 
procedure  TO_LIST 
function  TO  _  TEXT 

These  list  Interfaces  determine  the  equtllty  of  two 
lists,  delete  an  Item  from  a  list,  determine  the 
kind  of  list,  and  kind  of  list  Item. 
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List  splicing, 
merging,  and 
extracting 


Determining 
list  lengths 
and  names 


Manipulation 
of  list  Items 
In  a  list 


Manipulation 
of  tokens 


function  IS _ EQUAL 
procedure  DELETE 
function  GET  _ LIST  _  KIND 
function  G  ET_  LIST  _  KIND 
function  G ET  ~  ITEM  _  KIND 

These  list  interfaces  Insert  a  sublist  of  Items 
into  a  list,  merge  two  lists  and  extract  sublists 
of  Items  from  a  list. 

procedure  SPLICE 
procedure  MERGE 
function  SET _ EXTRACT 

These  list  Interfaces  determine  the  length  of  a  list, 
length  of  a  string  representing  text,  the  name 
of  a  named  Item  and  the  position  of  a  named  Item. 

function  LENGTH 
function  TEXT _ LENGTH 
procedure  ITEM _ NAME 
function  POSITION_BY_NAME 

These  list  Interfaces  extract  an  Item  from  a 
list,  replace  an  Item  In  a  list,  Insert  an  Item 
In  a  list,  and  search  a  list  for  a  list  value. 

procedure  EXTRACT 
procedure  REPLACE 
procedure  INSERT 
function  POSITION_BY_ VALUE 

Generic  Package  EDENTIFIER_ITEM 

These  Interfaces  are  used  for  manipulating  list 
Items  which  are  tokens.  Operations  performed  by 
these  Interfaces  convert  a  string  representation  of 
an  Identifier  to  Its  token,  convert  a  token  to  an 
identifier,  determine  the  equality  of  two  tokens, 
extract  an  Identifier  from  a  list,  replace  an 
Identifier  In  a  list,  Insert  an  Identifier 
Into  a  list,  and  search  a  list  for  an  identifier  item  value. 

procedure  TO _ TOKEN 
function  TO  _  TEXT 
function  IS  _  EQUAL 
procedure  EXTRACT 
procedure  REPLACE 
procedure  INSERT 
function  POSITION_BY_ VALUE 

Generic  Package  INTEGER  _  ITEM 
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Manipulation  These  interfaces  are  used  for  manlpulattne  list 

of  Integer  Items  which  are  Integers.  Operations  performed  by 

Items  In  a  these  Interfaces  convert  an  Integer  Item  to  its 

list  textual  representation,  extract  an  Integer  Item 

from  a  list.  Insert  an  Integer  Item  Into  a  list 
and  search  a  list  for  an  Integer  value. 

function  TO  _  TEXT 
function  EXTRACT 
procedure  REPLACE 
procedure  INSERT 
function  POSITION  BY  VALUE 


Manipulation 
of  floating 
point  Items 
In  a  list 


Manipulation 
of  string 
Items  in  a 
list 


Generic  Package  FLOAT _ ITEM 

These  Interfaces  are  used  for  manipulating  list 

items  which  are  floating  point  numbers.  Operations  performed  by 

these  Interfaces  convert  an  floating  point  Item  to  Its 

textual  representation,  extract  an  floating  point  Item 

from  a  list,  Insert  an  floating  point  Item  Into  a  list 

and  search  a  list  for  an  floating  point  value. 

function  TO  _  TEXT 
function  EXTRACT 
procedure  REPLACE 
procedure  INSERT 
function  POSITION_BY_VALUE 

Generic  Package  STRING  _  ITEM 

These  interfaces  are  used  for  manipulating  list 
Items  which  are  strings.  Operations  performed  by 
these  Interfaces  extract  a  string  item 
from  a  list,  replace  the  value  of  a  string  Item  In  a  list, 

Insert  a  string  Item  Into  a  list,  and 
search  a  list  for  a  string  value. 

function  EXTRACT 
procedure  REPLACE 
procedure  INSERT 
function  POSITION  BY  VALUE 
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Postscript  :  Submission  of  Comments 

For  submission  of  comments  on  this  proposed  M1L-STD-CAIS,  we  would  appreciate  them  being  sent 
by  ARPANET/MIL  NET  to  the  iddress 

CAJS-COMMENT  at  ECLM 

If  you  do  not  have  Arpanet  access,  please  send  the  comments  by  mail 

Patricia  Oberndorf 
Naval  Ocean  Systems  ('enter 
Code  423 

San  Diego,  CA  92152-5000 

For  mail  comments,  it  will  assist  us  If  you  are  able  to  send  them  on  8-Inch  single-sided  single-density 
DEC  format  diskette  •  but  even  if  you  can  manage  this,  please  also  send  us  a  paper  copy.  In  case  of 
problems  with  reading  the  diskette. 

All  comments  are  sorted  and  processed  mechanically  In  order  to  simplify  their  analysis  and  to 
facilitate  giving  them  proper  consideration.  To  aid  this  process  you  are  kindly  requested  to  precede 
each  comment  with  a  three  line  header 

Isection  ... 

(version  MIL-STD-CAIS 
(topic  ... 

(rationale  ... 

The  section  line  Includes  the  section  number,  the  paragraph  number  enclosed  In  parentheses,  your 
name  or  affiliation  (or  both),  and  the  date  in  ISO  standard  form  (year-month-day).  As  an  example, 
here  Is  the  section  line  of  a  comment  from  a  previous  version: 

(section  03.02.01(12)A.  Gargaro  82-04-26 

The  version  line,  for  comments  on  the  current  document,  should  only  contain  "MIL-STD-CAIS".  Its 
purpose  is  to  distinguish  comments  that  refer  to  different  versions. 

The  topic  line  should  contain  a  one  line  summary  of  the  comment.  This  line  is  essential,  and  you  are 
kindly  asked  to  avoid  topics  such  as  “Typo"  or  "Editorial  comment"  which  will  not  convey  any 
information  when  printed  In  a  table  of  contents.  As  an  example  of  an  informative  topic  line,  consider: 

(topic  FILE  NODE  MANAGEMENT 

Note  also  that  nothing  prevents  the  topic  line  from  Including  all  the  information  of  a  comment,  as  In 
the  following  topic  line: 

(topic  Insert:  "...are  {implicitly}  defined  by  a  subtype  declaration” 

As  a  final  example  here  Is  a  complete  comment: 

(section  03.02.01(1 2)A.  Gargaro  85-01-15 

(version  MIL-STD-CAIS 

(topic  FILE  NODE  MANAGEMENT 

Change  "component"  to  "subcomponent"  In  the  last  sentence. 

Otherwise  the  statement  Is  Inconsistent  with  the  defined  use  of  subcomponent  in  3.3,  which  says  that 
subcomponents  are  excluded  when  the  term  component  la  used  Instead  of  subcomponent. 


